| Package | Affected versions | Patched versions |
|---|---|---|
| deepofix | ≤ 3.3 |
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free