CVE-2005-1516 DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly h...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin dmail | = 3.1a | No fix listed |
References
- 15242 third-party-advisory vendor-advisory
- www.security.org.sg
- 13497 vdb-entry vendor-advisory
- dmail-dlist-bypass-authentication(20412) vdb-entry