CVE-2018-0680 Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to read/send mail or chang...
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neo debun imap | <= 3.3i_r4.0 | No fix listed |
| neo debun pop | <= 3.3p_r4.0 | No fix listed |
| neojapan Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) | All versions | No fix listed |
References
- JVN#00344155 third-party-advisory
- www.denbun.com vendor-advisory
- www.denbun.com vendor-advisory