5
CVE-2013-6796
- EPSS 6.3%
- Veröffentlicht 26.10.2014 20:55:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Deeproot Linux ≫ Deepofix Version <= 3.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.3% | 0.927 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://packetstormsecurity.com/files/124054
http://www.exploit-db.com/exploits/29706
http://www.osvdb.org/100007
http://www.securityfocus.com/bid/63793
https://exchange.xforce.ibmcloud.com/vulnerabilities/89077