CVE-2000-0610: Medium severity Netwin CWMail vulnerability
Published Jun 23, 2000
·Updated
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
Affected Software
2 affected components
Netwin CWMail=2.6g
Netwin dMailWeb=2.6g
Remediation
Patch Available
Event History
Jun 23, 2000
CVE Published
04:00 AM
Oct 13, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0610?
The severity of CVE-2000-0610 is generally considered to be high due to the possibility of unauthorized mail relay.
2
How do I fix CVE-2000-0610?
To fix CVE-2000-0610, upgrade to a version of NetWin dMailWeb or cwMail that is later than 2.6g.
3
What are the potential impacts of CVE-2000-0610?
The potential impacts of CVE-2000-0610 include unauthorized use of the mail server for sending spam or malicious emails.
4
Which versions of software are affected by CVE-2000-0610?
Versions 2.6g and earlier of both NetWin dMailWeb and cwMail are affected by CVE-2000-0610.
5
Can CVE-2000-0610 be exploited remotely?
Yes, CVE-2000-0610 can be exploited remotely, allowing attackers to bypass authentication easily.