CVE-2008-2049

Published: May 1, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message.

Affected (2)

Products: E Post Corporation: Mail Server

E Post Corporation

1 product

Mail Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
E Post Corporation Mail Server	Version 4.10
E Post Corporation Mail Server	Version enterprise_4.10

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://secunia.com/advisories/29990

Source: cve@mitre.org

Vendor Advisory

http://vuln.sg/epostmailserver410-en.html

Source: cve@mitre.org

http://www.e-postinc.jp/Mail_Server.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/28951

Source: cve@mitre.org

http://www.securitytracker.com/id?1019930

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1389/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42035

Source: cve@mitre.org

http://secunia.com/advisories/29990