CVE-2001-1280

  • Last update: Apr 13, 2023

Description

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.

Software From Fixed in
ipswitch / imail 6.0.2 6.0.2.x
ipswitch / imail 6.0.6 6.0.6.x
ipswitch / imail 7.0.4 7.0.4.x

Details

    • Severity: Medium
  • CVE: CVE-2001-1280
  • Published: Oct 12, 2001
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N