CVE-2005-0315

UNKNOWN

The FTP service in Magic Winmail Server 4

Published Feb 10, 2005

Modified 1 years ago

No fix available

Details

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.

References

WEBhttp://marc.info/?l=bugtraq&m=110685011825461&w=2 ADVISORYhttp://secunia.com/advisories/14053 WEBhttp://securitytracker.com/id?1013017 WEBhttp://www.securityfocus.com/bid/12388 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/19115 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2005-0315

CVSS Analysis

CVSS v2.0

4.6

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

4.6/AV:L/AC:L/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedFeb 10, 2005

ModifiedAug 7, 2024