CVEvulnerability
CVE-2002-1416
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.
Affected configurations
• webeasymail webeasymail (<= 3.4.2.2)
References
- http://online.securityfocus.com/archive/1/288222 Exploit, Vendor Advisory
- http://www.iss.net/security_center/static/9925.php Vendor Advisory
- http://www.securityfocus.com/bid/5519 Vendor Advisory
- http://online.securityfocus.com/archive/1/288222 Exploit, Vendor Advisory
- http://www.iss.net/security_center/static/9925.php Vendor Advisory
- http://www.securityfocus.com/bid/5519 Vendor Advisory