CVE-2002-1416

CVE-2002-1416 describes a vulnerability in WebEasyMail 3.4.2.2 and earlier, where the POP3 service provides distinct error messages for valid versus invalid usernames during authentication attempts. This information leakage significantly simplifies brute-force attacks against user accounts. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and is easily exploitable over the network with low attack complexity, potentially leading to unauthorized information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.