CVE-2018-0682

Denbun CVE-2018-0682 stems from improper session management in Denbun POP (v3.3P R4.0 and earlier) and Denbun IMAP (v3.3I R4.0 and earlier). This weakness lets remote attackers read or send mail and modify configuration via unspecified vectors. The CVSS (3.0) vectors indicate high impact across c...

CVE-2018-0681

Denbun by NEOJAPAN Inc. is affected (Denbun POP v3.3P R4.0 and earlier; Denbun IMAP v3.3I R4.0 and earlier). The issue is hard-coded credentials that may allow remote attackers to login to the Management page and modify configuration. This CVE is also listed with high/critical impact in sources t...

CVE-2018-0684

Buffer overflow in Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier allows remote attackers to execute arbitrary code or cause a denial-of-service DoS condition via multipart/form-data format data...

CVE-2018-0686

Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier allows remote authenticated attackers to upload and execute any executable files via unspecified vectors...

CVE-2018-0681

Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier uses hard-coded credentials, which may allow remote attackers to login to the Management page and change the configuration...

CVE-2018-0687

CVE-2018-0687 is a cross-site scripting (CWE-79) vulnerability in Denbun’s HTML mail view, affecting Denbun POP/IMAP, version V3.3P R4.0 and earlier (and Denbun IMAP V3.3I R4.0 and earlier). The issue allows an attacker to cause a verified user’s browser to execute arbitrary script via unspecifie...

CVE-2018-0680

Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration...

CVE-2018-0680

CVE-2018-0680 affects Denbun WebMail components (Denbun POP v3.3P R4.0 and earlier; Denbun IMAP v3.3I R4.0 and earlier). The root cause is hard-coded credentials, enabling remote attackers to read/write mail or alter configuration. Connected sources (NVD/PRION/JVN) confirm specific vulnerability ...

JVN#00344155: Multiple vulnerabilities in Denbun

Denbun provided by NEOJAPAN Inc. is a WebMail System. Denbun contains multiple vulnerabilities listed below. Hard-coded credentials for user account CWE-798 - CVE-2018-0680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2|...