Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.
Software | From | Fixed in |
---|---|---|
extremail / extremail | 1.0 | 1.0.x |
extremail / extremail | 1.0.1 | 1.0.1.x |
extremail / extremail | 1.0.2 | 1.0.2.x |
extremail / extremail | 1.0.3 | 1.0.3.x |
extremail / extremail | 1.1 | 1.1.x |
extremail / extremail | 1.1.1 | 1.1.1.x |
extremail / extremail | 1.1.10 | 1.1.10.x |
extremail / extremail | 1.1.2 | 1.1.2.x |
extremail / extremail | 1.1.3 | 1.1.3.x |
extremail / extremail | 1.1.4 | 1.1.4.x |
extremail / extremail | 1.1.5 | 1.1.5.x |
extremail / extremail | 1.1.6 | 1.1.6.x |
extremail / extremail | 1.1.7 | 1.1.7.x |
extremail / extremail | 1.1.8 | 1.1.8.x |
extremail / extremail | 1.1.9 | 1.1.9.x |
extremail / extremail | 1.5 | 1.5.x |
extremail / extremail | 1.5.5 | 1.5.5.x |
extremail / extremail | 1.5.8 | 1.5.8.x |
extremail / extremail | 1.5.9 | 1.5.9.x |