CVE-2016-4460

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.

• CWE-287

• http://markmail.org/message/jy7o23cppny26icuMailing List, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100449Third Party Advisory, VDB Entry
• http://markmail.org/message/jy7o23cppny26icuMailing List, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100449Third Party Advisory, VDB Entry

Published

Aug 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4454The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c…6
• CVE-2016-4455The Subscription Manager package (aka subscription-manager) …3.3
• CVE-2016-4456The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.1…7.5
• CVE-2016-4457CloudForms Management Engine before 5.8 includes a default S…
• CVE-2016-4458Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-4459Stack-based buffer overflow in native/mod_manager/node.c in …
• CVE-2016-4461Apache Struts 2.x before 2.3.29 allows remote attackers to e…
• CVE-2016-4462By manipulating the URL parameter externalLoginKey, a malici…
• CVE-2016-4463Stack-based buffer overflow in Apache Xerces-C++ before 3.1.…
• CVE-2016-4464The application plugins in Apache CXF Fediz 1.2.x before 1.2…
• CVE-2016-4465The URLValidator class in Apache Struts 2 2.3.20 through 2.3…
• CVE-2016-4466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…