| Package | Affected versions | Patched versions |
|---|---|---|
| vpopmail (vchkpw) | = 5.4.14= 5.4.15 |
vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free