Webeasymail: >> Webeasymail Security Vulnerabilities
Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests.
CVSS Score
5.0
EPSS Score
0.019
Published
2003-04-11
The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.
CVSS Score
5.0
EPSS Score
0.006
Published
2003-04-11