Dmail

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:dmail:2.8f:*:*:*:*:*:*:*

part: a version: 2.8f update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductDmail (c9b12b57-b527-52f0-b261-195969163770)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1355 vulnerable 2026-06-08 04:46:19.661547 Details available
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T04:51:08.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1354 vulnerable 2026-06-08 04:46:19.657323 Details available
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T04:51:08.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0490 vulnerable 2026-06-08 04:45:18.154677 Details available
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:21:30.850Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.