Multiple vulnerabilities in Winmail

Beschreibung

Multiple serious vulnerabilities have been found in Winmail Server. Malicious users can exploit these vulnerabilities to inject scripts or overwrite local files. Below is a complete list of vulnerabilities

1. A directory traversal can be exploited remotely via a side parameter;
2. An XSS vulnerability can be exploited remotely via a retid parameter or specially designed e-mail messages.

Ursprüngliche Informationshinweise

CVE Liste

• CVE-2005-3811
  critical
• CVE-2005-3692
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com