Vulnerability Details CVE-2004-2313
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.3%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2004-2313
-
cpe:2.3:a:inter7:sqwebmail:3.4.1
-
cpe:2.3:a:inter7:sqwebmail:3.5.0
-
cpe:2.3:a:inter7:sqwebmail:3.5.1
-
cpe:2.3:a:inter7:sqwebmail:3.5.2
-
cpe:2.3:a:inter7:sqwebmail:3.5.3
-
cpe:2.3:a:inter7:sqwebmail:3.6.0
-
cpe:2.3:a:inter7:sqwebmail:3.6.1