How severe is CVE-2004-0336?

CVE-2004-0336 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2004-0336 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2004-0336?

CVE-2004-0336 primarily affects Software602 602pro Lan Suite. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2004-0336?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2004-0336 published?

CVE-2004-0336 was published on 2004-11-23 and last updated on 2026-06-16.

CVE-2004-0336

CVE-2004-0336 is a medium-severity vulnerability in Software602 602pro Lan Suite with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Software602 602pro Lan Suite
Published: 2004-11-23
Last modified: 2026-06-16

Description

LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.

Frequently asked questions

What is CVE-2004-0336?: LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.
How severe is CVE-2004-0336?: CVE-2004-0336 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2004-0336 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-0336?: CVE-2004-0336 primarily affects Software602 602pro Lan Suite. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2004-0336?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-0336 published?: CVE-2004-0336 was published on 2004-11-23 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*
cpe:2.3:a:software602:602pro_lan_suite:2003:*:*:*:*:*:*:*

More vulnerabilities in Software602 602pro Lan Suite

CVE-2002-2152 — Critical (CVSS 10.0): The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator…
CVE-2007-3203 — High (CVSS 7.5): Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote…
CVE-2001-0447 — High (CVSS 7.5): Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute…
CVE-2000-1115 — High (CVSS 7.5): Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows…
CVE-2004-0337 — Medium (CVSS 6.8): Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary…
CVE-2004-0335 — Medium (CVSS 5.0): LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a…

All CVEs affecting Software602 602pro Lan Suite →