Description
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
References
- netwin-dmailweb-newline(4770) vdb-entry
- 1390 vdb-entry
- 20000623 NetWin dMailWeb Unrestricted Mail Relay mailing-list