CVE-2018-0682 Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or ch...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neo debun imap | <= 3.3i_r4.0 | No fix listed |
| neo debun pop | <= 3.3p_r4.0 | No fix listed |
| neojapan Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) | = Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier | No fix listed |
References
- JVN#00344155 third-party-advisory
- www.denbun.com vendor-advisory
- www.denbun.com vendor-advisory