Unscored severity · published Nov 23, 2004
CVE-2004-0336
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory
–
CVSS
1.5%
EPSS
No
On KEV
Description
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
6L
602pro Lan Suite · Software602
2002; 2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0336
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0336
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html
marc.info
http://marc.info/?l=bugtraq&m=107799540630302&w=2
Exploit
http://www.securityfocus.com/bid/9781
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15350
More from 602pro Lan Suite
–
CVE-2007-3203
Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with…
–
CVE-2004-0337
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed…
–
CVE-2004-0335
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html,…
–
CVE-2002-2174
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service…
–
CVE-2002-1928
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension