CVE-2005-0315

EPSS 0.37%
Published 27.01.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Amax Information Technologies ≫ Magic Winmail Server Version4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.556

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=110685011825461&w=2

http://secunia.com/advisories/14053

http://securitytracker.com/id?1013017

http://www.securityfocus.com/bid/12388

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19115

https://nvd.nist.gov/vuln/detail/CVE-2005-0315

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0315

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0315

EUVD