PT-2004-3045 · Nettica · Intellipeer Email Server

Published 2004-12-31 · Updated 2024-02-13 · CVE-2004-2150

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nettica Corporation INTELLIPEER Email Server version 1.01

Description The issue allows remote attackers to determine valid account names by exploiting different error messages displayed for valid and invalid account names.

Recommendations For version 1.01, consider modifying the error message handling to prevent disclosure of valid account names, or update to a version where this issue is resolved if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2004-2150

Affected Products

Intellipeer Email Server

References · 7

• http://secunia.com/advisories/12661 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2150 · Security Note
• http://osvdb.org/10349 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17510 · Note
• http://securitytracker.com/id?1011425 · Note
• https://t.me/cvenotify/71308 · Telegram Post
• http://securityfocus.com/bid/11257 · Note