CVE-2002-1416

The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-04-11

Last modified

2024-08-08

Affected products

• Webeasymail (Webeasymail)

References

• http://online.securityfocus.com/archive/1/288222
• http://www.iss.net/security_center/static/9925.php
• http://www.securityfocus.com/bid/5519