CVE-2003-0268

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-05-27

Last modified

2024-08-08

Affected products

• Slwebmail (Bvrp Software)

References

• http://marc.info/?l=bugtraq&m=105232436210273&w=2
• http://marc.info/?l=ntbugtraq&m=105233363721919&w=2
• http://www.nextgenss.com/advisories/slwebmail-vulns.txt