{"id":"CVE-2002-1416","aliases":["EUVD-2002-1399","GHSA-623v-x9rh-m33f"],"status":"published","title":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for...","description":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01772,"percentile":0.7829,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-03-18T05:00:00Z","modified":"2026-06-16T21:59:17Z","products":[{"vendor":"webeasymail","product":"webeasymail"}],"references":[{"url":"http://online.securityfocus.com/archive/1/288222","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9925.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5519","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1416"},{"url":"https://github.com/advisories/GHSA-623v-x9rh-m33f"}],"sources":{"cve":[{"id":"CVE-2002-1416","description":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:27.339Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1399","description":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:27Z","updated_at":"2026-11-03T01:14:56.257509Z"}],"ghsa":[{"id":"GHSA-623v-x9rh-m33f","title":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for...","description":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.","status":"published","published":"2022-04-30T18:21:07Z","modified":"2023-01-30T05:05:45Z","updated_at":"2026-11-02T14:47:21.132905Z"}],"nvd":[{"id":"CVE-2002-1416","description":"The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.","status":"published","published":"2003-04-11T04:00:00Z","modified":"2026-06-16T21:59:17.317Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:44.251133Z"}]}}