PatchTheCVEmagic winmail server vulnerabilities and fixes
Recent CVEs affecting magic winmail server, with upgrade or downgrade steps. 6 tracked.
Also searched as: magicwinmailserver.
magic winmail server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2005-11-25. Highest priority: CVE-2003-0391 (score 54/100).
- CVE-2005-3811 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier
- CVE-2005-3692 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remo
- CVE-2005-0315 MEDIUM 4.6 DOWNGRADE The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command i
- CVE-2005-0313 HIGH 7.5 DOWNGRADE Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to
- CVE-2004-2572 MEDIUM 5.0 DOWNGRADE AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid
- CVE-2003-0391 HIGH 7.5 UPGRADE Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attack
FAQ
How do I fix magic winmail server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is magic winmail server being exploited right now?
None of the tracked magic winmail server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which magic winmail server CVE should I patch first?
CVE-2003-0391 currently ranks highest (54/100): Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attack.