CGI abuses : iXmail arbitrary file upload

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.11781

Category: CGI abuses

Title: iXmail arbitrary file upload

Summary: NOSUMMARY

Description: Description:

The remote host is running the iXmail webmail interface.

There is a flaw in this interface which allows an attacker who
has a valid account on this host to upload and execute arbitrary
php files on this host, thus potentially gaining a shell on
this host. An attacker may also use this flaw to delete
arbitrary files on the remote host, with the privileges of the
web server.

Solution : Upgrade to iXMail 0.4
Risk factor : Medium

Cross-Ref: BugTraq ID: 8046
BugTraq ID: 8048

Copyright This script is Copyright (C) 2003 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.11781
Category:	CGI abuses
Title:	iXmail arbitrary file upload
Summary:	NOSUMMARY
Description:	Description: The remote host is running the iXmail webmail interface. There is a flaw in this interface which allows an attacker who has a valid account on this host to upload and execute arbitrary php files on this host, thus potentially gaining a shell on this host. An attacker may also use this flaw to delete arbitrary files on the remote host, with the privileges of the web server. Solution : Upgrade to iXMail 0.4 Risk factor : Medium
Cross-Ref:	BugTraq ID: 8046 BugTraq ID: 8048
Copyright	This script is Copyright (C) 2003 Tenable Network Security