Software602 602Lan Suite vulnerabilities

CVE-2005-0344 [MEDIUM] CVE-2005-0344: Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users t Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.

CVE-2005-1423 [MEDIUM] CVE-2005-1423: Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote a Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the presence of arbitrary files via .. sequences in the A parameter.

CVE-2004-1501 [MEDIUM] CVE-2004-1501: The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a d The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data.

CVE-2004-1502 [MEDIUM] CVE-2004-1502: The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a deni The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop.

CVE-2005-1909 [MEDIUM] CVE-2005-1909: The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "<!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.