CVE-2004-2313 in SqWebMail
Summary
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
08/16/2005
Disclosure
12/31/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 23211 | Inter7 SqWebMail Error Message information disclosure | 200 | Not defined | Not defined | CVE-2004-2313 |