CVE-2004-0332: Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which al...

Security readout for executives and security teams

Extremail 1.5.9 mishandles password checks when passwords are all digits or start with a digit. A remote attacker may be able to gain privileges if an exposed installation uses affected credentials. The sources do not provide CVSS, patch details, or confirmed active exploitation. Exposure is most likely in legacy environments still running Extremail 1.5.9, especially if reachable from untrusted networks or the internet. Modern exposure is likely uncommon, but old mail infrastructure can persist unnoticed. Treat this as a legacy exposure risk. It matters if Extremail 1.5.9 is still present or externally reachable; otherwise urgency is low. Prioritize discovery, isolation, and replacement of unsupported mail systems. Mitigation focus: Inventory for any Extremail 1.5.9 installations or inherited mail appliances.; Check vendor or archive guidance for patches, upgrades, or retirement recommendations.; Replace unsupported Extremail deployments where no maintained fix is available..

Prepared

Jun 30, 2026, 06:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.