Vulnerabilities

TI-2012-05120 CVE-2012-6275 · GHSA-8jm2-5j3f-p7pq

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server…

HIGH 73

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.46498 Published 2013-02-24 No fix listed CWE-119

TI-2012-05119 CVE-2012-6274 · GHSA-cwq6-rvjc-59gf

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading…

MEDIUM 53

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.46868 Published 2013-02-24 No fix listed CWE-287

TI-2012-05118 CVE-2012-6273 · GHSA-fxr3-4p43-fvmw

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote…

LOW 35

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0126 Published 2013-02-24 No fix listed CWE-89

Vulnerabilities

Filters

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server…

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading…

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote…