Test ID:	1.3.6.1.4.1.25623.1.0.20346
Category:	Web application abuses
Title:	VisNetic / Merak Mail Server multiple flaws
Summary:	The remote webmail server is affected by multiple vulnerabilities; which may allow an attacker to execute arbitrary commands on the remote host.
Description:	Summary: The remote webmail server is affected by multiple vulnerabilities which may allow an attacker to execute arbitrary commands on the remote host. Vulnerability Impact: An attacker could send specially-crafted URLs to execute arbitrary scripts, perhaps taken from third-party hosts, or to disclose the content of files on the remote system. Solution: Upgrade to Merak Mail Server 8.3.5.r / VisNetic Mail Server version 8.3.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4556 BugTraq ID: 16069 http://www.securityfocus.com/bid/16069 Bugtraq: 20051227 Secunia Research: IceWarp Web Mail Multiple File InclusionVulnerabilities (Google Search) http://www.securityfocus.com/archive/1/420255/100/0/threaded http://marc.info/?l=full-disclosure&m=113570229524828&w=2 http://secunia.com/secunia_research/2005-62/advisory/ http://www.osvdb.org/22077 http://www.osvdb.org/22078 http://securitytracker.com/id?1015412 http://secunia.com/advisories/17046 http://secunia.com/advisories/17865 Common Vulnerability Exposure (CVE) ID: CVE-2005-4557 http://www.osvdb.org/22079 XForce ISS Database: visnetic-scripts-file-include(23897) https://exchange.xforce.ibmcloud.com/vulnerabilities/23897 Common Vulnerability Exposure (CVE) ID: CVE-2005-4558 http://www.osvdb.org/22080 http://www.osvdb.org/22081 XForce ISS Database: visnetic-settings-file-include(23904) https://exchange.xforce.ibmcloud.com/vulnerabilities/23904 Common Vulnerability Exposure (CVE) ID: CVE-2005-4559 http://www.osvdb.org/22082 http://securityreason.com/securityalert/299 XForce ISS Database: visnetic-information-disclosure(23907) https://exchange.xforce.ibmcloud.com/vulnerabilities/23907
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.