CVE-2005-3811
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824)...
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
CVE-2005-3811- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
CVE-2005-3811- Updated
- 2026-11-02
EUVDEUVD-2005-3806 No score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
EUVD-2005-3806- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8g6v-v3p8-6wx3 No score
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824)...
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter.
- Record
GHSA-8g6v-v3p8-6wx3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User | 2007-04-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3811 is a medium vulnerability (CVSS 5.0) in Amax Information Technologies Magic Winmail Server, published November 25, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.33%, the 94th percentile. No source names a fixed version.
References
secunia.com/advisories/16665
securityfocus.com/bid/15493
exchange.xforce.ibmcloud.com/vulnerabilities/23132
osvdb.org/20925
archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html
securityreason.com/securityalert/195
nvd.nist.gov/vuln/detail/CVE-2005-3811
github.com/advisories/GHSA-8g6v-v3p8-6wx3