First published: Wed Sep 01 2004(Updated: )
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Software602 602pro Lan Suite | =2002 | |
Software602 602pro Lan Suite | =2003 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0336 is considered a low-severity vulnerability that exposes sensitive information through the mail login form.
To mitigate CVE-2004-0336, ensure the mail login form does not disclose file paths or sensitive directory information.
CVE-2004-0336 affects Software602 602Pro LAN Suite versions 2002 and 2003.
CVE-2004-0336 is an information disclosure vulnerability that can be exploited by remote attackers.
Yes, the information disclosed by CVE-2004-0336 could potentially be used by attackers to launch additional attacks against the system.