CVE-2006-2346

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set…

published May 12, 2006

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01709 · 77.1th percentile
Published
2006-05-12T17:00Z
EPSS history
Timeline
  • 12 MAY 17:00Z
    vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set…
    cvelistv5