Multiple vulnerabilities in Winmail

Description

Multiple serious vulnerabilities have been found in Winmail Server. Malicious users can exploit these vulnerabilities to inject scripts or overwrite local files. Below is a complete list of vulnerabilities

1. A directory traversal can be exploited remotely via a side parameter;
2. An XSS vulnerability can be exploited remotely via a retid parameter or specially designed e-mail messages.

Original advisories

Related products

• Winmail-Server

CVE list

• CVE-2005-3811
  critical
• CVE-2005-3692
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com