Lucene search

K
cve[email protected]CVE-2003-0268
HistoryMay 27, 2003 - 4:00 a.m.

CVE-2003-0268

2003-05-2704:00:00
web.nvd.nist.gov
20
cve-2003-0268
slwebmail
windows
remote attackers
server path disclosure
dll
webmailreq.dll
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.

Affected configurations

NVD
Node
bvrp_softwareslwebmailMatch3.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Related for CVE-2003-0268