CVE-2001-0104

high

Description

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/5763

http://www.securityfocus.com/bid/2115

http://www.securityfocus.com/archive/1/151156

Details

Source: Mitre, NVD

Published: 2001-02-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.1

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N