CVE-2008-2049

The CVE-2008-2049 entry affects E-Post Mail Server 4.10, specifically the POP3 server EPSTPOP3S.EXE v4.22. The vulnerability arises from handling of crafted APOP commands for a known POP3 account, which can disclose the user password in a POP3 error message. This is a remote-authenticated exposur...