CVE

Id
14636  
CVE No.
CVE-2005-3430  
Status
Candidate  
Description
Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension.  
Phase
Assigned (20051102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
111774 14636 CVE-2005-3430 BUGTRAQ:20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
111775 14636 CVE-2005-3430 URL:http://marc.info/?l=bugtraq&m=113053680631151&w=2  View
111776 14636 CVE-2005-3430 FULLDISC:20051028 Multiple vulnerabilities within RockLiffe MailSite Express WebMail  View
111777 14636 CVE-2005-3430 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html  View
111778 14636 CVE-2005-3430 MISC:http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf  View
111779 14636 CVE-2005-3430 BID:15230  View
111780 14636 CVE-2005-3430 URL:http://www.securityfocus.com/bid/15230  View
111781 14636 CVE-2005-3430 SECTRACK:1015117  View
111782 14636 CVE-2005-3430 URL:http://securitytracker.com/id?1015117  View
111783 14636 CVE-2005-3430 SECUNIA:17240  View
111784 14636 CVE-2005-3430 URL:http://secunia.com/advisories/17240/  View
111785 14636 CVE-2005-3430 XF:mailsiteexpress-attachment-script-execution(22907)  View

Related JVN