CVE-2013-6796

2014-10-2620:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

Low

0.084 Low

EPSS

Percentile

94.5%

JSON

The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.

References

packetstormsecurity.com/files/124054

www.exploit-db.com/exploits/29706

www.osvdb.org/100007

www.securityfocus.com/bid/63793

exchange.xforce.ibmcloud.com/vulnerabilities/89077