CVE-2003-0268 SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bvrp software slwebmail | = 3.0 | No fix listed |
References
- 20030507 Multiple Vulnerabilities in SLWebmail mailing-list
- 20030507 Multiple Vulnerabilities in SLWebmail mailing-list
- www.nextgenss.com vendor-advisory