CVE-2005-0315

Published: Jan 27, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.

Affected (1)

Products: Amax Information Technologies: Magic Winmail Server

Amax Information Technologies

1 product

Magic Winmail Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Amax Information Technologies Magic Winmail Server	Version 4.0

References (10)

http://marc.info/?l=bugtraq&m=110685011825461&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14053

Source: cve@mitre.org

http://securitytracker.com/id?1013017

Source: cve@mitre.org

http://www.securityfocus.com/bid/12388

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19115

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110685011825461&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/14053

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1013017

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12388

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19115

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.