This host is running MailScan a Mail Server, which is prone to multiple vulnerabilities.

Successful Remote exploitation will allow, to gain unauthorized access to disclose sensitive information, directory traversal attacks, cross site scripting, execution fo arbitrary script code within the context of the website to steal cookie-based authentication credentials. Impact Level : Application

Upgrade to MicroWorld MailScan Version 6.4a or later. For updates refer to http://www.mwti.net/

Multiple flaws are due to, - an input validation error within the web administration interface. - the web administration interface does not properly restrict access to certain pages. can cause an authentication-bypass vulnerability. - an input passed via URL to the web administration interface is not properly sanitized before being returned to the user.

MicroWorld MailScan for Mail Servers 5.6a and prior versions.

• http://secunia.com/advisories/31534
• http://www.oliverkarow.de/research/mailscan.txt

---

Updated on 2015-03-25