CVE-2001-1280 POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch imail | = 6.0.2 | No fix listed |
| ipswitch imail | = 6.0.6 | No fix listed |
| ipswitch imail | = 7.0.4 | No fix listed |
References
- 20011011 Vulnerabilities in Ipswitch IMail Server 7.04 mailing-list
- www.ipswitch.com
- 3424 vdb-entry