CVEvulnerability

CVE-2005-1516

7.5 HIGH Published 2005-05-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.

Affected configurations

• netwin dmail 3.1a

References