Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:dmail:2.7r:*:*:*:*:*:*:*

part: a version: 2.7r update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductDmail (c9b12b57-b527-52f0-b261-195969163770)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1355 vulnerable 2026-06-08 04:46:19.661512 Details available
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T04:51:08.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1354 vulnerable 2026-06-08 04:46:19.656261 Details available
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T04:51:08.196Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.