Web application abuses : ArGoSoft Mail Server multiple flaws(2)

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.16012

Kategorie: Web application abuses

Titel: ArGoSoft Mail Server multiple flaws(2)

Zusammenfassung: There are multiple flaws in ArGoSoft WebMail interface which; may allow an attacker to bypass authentication, inject HTML in the e-mails read by the users; and even to read arbitrary files on that server.

Beschreibung: Summary:
There are multiple flaws in ArGoSoft WebMail interface which
may allow an attacker to bypass authentication, inject HTML in the e-mails read by the users
and even to read arbitrary files on that server.

Solution:
Upgrade to ArGoSoft 1.8.7.0 or newer.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Querverweis: BugTraq ID: 12044

Copyright Copyright (C) 2004 David Maciejak

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.16012
Kategorie:	Web application abuses
Titel:	ArGoSoft Mail Server multiple flaws(2)
Zusammenfassung:	There are multiple flaws in ArGoSoft WebMail interface which; may allow an attacker to bypass authentication, inject HTML in the e-mails read by the users; and even to read arbitrary files on that server.
Beschreibung:	Summary: There are multiple flaws in ArGoSoft WebMail interface which may allow an attacker to bypass authentication, inject HTML in the e-mails read by the users and even to read arbitrary files on that server. Solution: Upgrade to ArGoSoft 1.8.7.0 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 12044
Copyright	Copyright (C) 2004 David Maciejak