Unscored severity · published Nov 2, 2005
CVE-2005-3470
SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mailscanner · Mailscanner
1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3470
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3470
Patch
http://secunia.com/advisories/17405
sourceforge.net
http://sourceforge.net/project/shownotes.php?release_id=367923
www.osvdb.org
http://www.osvdb.org/20451
www.securityfocus.com
http://www.securityfocus.com/bid/15278
www.vupen.com
http://www.vupen.com/english/advisories/2005/2276
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/22945
More from Mailscanner
5.5
CVE-2010-3292
The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could…
5.5
CVE-2010-3293
mailscanner can allow local users to prevent virus signatures from being updated
4.7
CVE-2010-3095
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files
–
CVE-2008-5313
mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1)…
–
CVE-2008-5312
mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1)…