medium5.0
CVE-2004-2313
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as …
Impact
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inter7 | Sqwebmail | Versions 3.4.1, 3.5.0, 3.5.1, 3.5.2, 3.5.3, 3.6.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/352317
- http://www.securityfocus.com/bid/9541
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15058
- http://www.securityfocus.com/archive/1/352317
- http://www.securityfocus.com/bid/9541
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15058