| Package | Affected versions | Patched versions |
|---|---|---|
| cwmail | = 2.6g | |
| dmailweb | = 2.6g |
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free