CVE-2004-2313

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as…

published August 16, 2005

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01625 · 75.8th percentile
Published
2005-08-16T04:00Z
EPSS history
Timeline
  • 16 AUG 04:00Z
    Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as…
    cvelistv5