Lucene search

[email protected]CVE-2008-2049

HistoryMay 01, 2008 - 7:05 p.m.

CVE-2008-2049

2008-05-0119:05:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2008-2049

e-post mail server

pop3

information security

remote attackers

sensitive information

vulnerability

nvd

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.4%

JSON

The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message.

CPENameOperatorVersion
e-post_corporation:mail_servere-post corporation mail servereq4.10
e-post_corporation:mail_servere-post corporation mail servereqenterprise_4.10

CPE	Name	Operator	Version
e-post_corporation:mail_server	e-post corporation mail server	eq	4.10
e-post_corporation:mail_server	e-post corporation mail server	eq	enterprise_4.10

References

secunia.com/advisories/29990

vuln.sg/epostmailserver410-en.html

www.e-postinc.jp/Mail_Server.html

www.securityfocus.com/bid/28951

www.securitytracker.com/id?1019930

www.vupen.com/english/advisories/2008/1389/references

exchange.xforce.ibmcloud.com/vulnerabilities/42035

7.3 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.4%

JSON

Related for CVE-2008-2049

cvelist1 prion1