Description
class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain unauthorized access.
References
- 20050706 PHPXMAIL - Authentication Bypass mailing-list
- 15951 third-party-advisory