CVEvulnerability
CVE-2005-0315
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.
Affected configurations
• amax information technologies magic winmail server 4.0
Related
Referenced by CWE · observed example (1)
- CWE-441 Unintended Proxy or Intermediary weakness
References
- http://marc.info/?l=bugtraq&m=110685011825461&w=2 marc.info
- http://secunia.com/advisories/14053 secunia.com
- http://securitytracker.com/id?1013017 securitytracker.com
- http://www.securityfocus.com/bid/12388 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19115 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110685011825461&w=2 marc.info
- http://secunia.com/advisories/14053 secunia.com
- http://securitytracker.com/id?1013017 securitytracker.com
- http://www.securityfocus.com/bid/12388 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19115 exchange.xforce.ibmcloud.com