CVE-2002-2410
- State
- Published
- Severity
- Not scored
- Published
- Nov 1, 2007
- Updated
- Sep 17, 2024
- Reserved
- Nov 1, 2007
Description
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- open-webmail-information-disclosure(10684)vdb-entry
- 20021119 Open WebMail 1.71 "background" magic infomailing-list
- 6232vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.