CVE-2004-2313

EPSS 0.33%

發布日:2004/12/31修改日:2026/4/28

也稱為:DEBIAN-CVE-2004-2313

描述

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.

受影響套件(1)

Debian/courierfrom 0, < 0.44.2-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2004-2313