Detections
Analytics
Winmail Server <= 4.2 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 3300
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote host is running a version of Magic Winmail Server that is vulnerable to multiple flaws. These flaws include a directory traversal flaw that would allow an attacker to access confidential data, a cross-site scripting (XSS) flaw and an HTML injection flaw.Solution
No solution is known at this time.See Also
Plugin Details
Severity: Critical
ID: 3300
Family: POP Server
Published: 11/18/2005
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:amax_information_technologies:magic_winmail_server