PT-2004-1486 · Extremail · Extremail

Andrey Smirnov · Publicado 2004-03-18 · Atualizado 2017-07-11 · CVE-2004-0332

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Extremail version 1.5.9

Description The issue allows remote attackers to gain privileges due to incorrect password checking when passwords are all digits or begin with a digit.

Recommendations For Extremail version 1.5.9, update to a version that correctly checks passwords to prevent remote attackers from gaining privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0332

Produtos afetados

Extremail

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-0332 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=107783767517850&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15329 · Nota
• http://securityfocus.com/bid/9754 · Aviso do Fabricante