CVE-2004-0332 Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremail | = 1.0 | No fix listed |
| extremail | = 1.0.1 | No fix listed |
| extremail | = 1.0.2 | No fix listed |
| extremail | = 1.0.3 | No fix listed |
| extremail | = 1.1 | No fix listed |
| extremail | = 1.1.1 | No fix listed |
| extremail | = 1.1.2 | No fix listed |
| extremail | = 1.1.3 | No fix listed |
| extremail | = 1.1.4 | No fix listed |
| extremail | = 1.1.5 | No fix listed |
| extremail | = 1.1.6 | No fix listed |
| extremail | = 1.1.7 | No fix listed |
| extremail | = 1.1.8 | No fix listed |
| extremail | = 1.1.9 | No fix listed |
| extremail | = 1.1.10 | No fix listed |
| extremail | = 1.5 | No fix listed |
| extremail | = 1.5.5 | No fix listed |
| extremail | = 1.5.8 | No fix listed |
| extremail | = 1.5.9 | No fix listed |
References
- 20040226 Extremail Security Problem mailing-list
- 9754 vdb-entry vendor-advisory
- extremail-password-gain-access(15329) vdb-entry