CVE-2000-0610 NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin cwmail | = 2.6g | No fix listed |
| netwin dmailweb | = 2.6g | No fix listed |
References
- 20000623 NetWin dMailWeb Unrestricted Mail Relay mailing-list
- 1390 patch vdb-entry vendor-advisory
- netwin-dmailweb-newline(4770) vdb-entry