Description
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service.
References
- 20000623 NetWin dMailWeb Unrestricted Mail Relay mailing-list
- netwin-dmailweb-auth(4771) vdb-entry
- 1391 vdb-entry