CVE-2004-2313 | BDVDB-2026-11955 Detail

Description#

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/352317
http://www.securityfocus.com/bid/9541
https://exchange.xforce.ibmcloud.com/vulnerabilities/15058

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.