CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:inter7:vpopmail:3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.3:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.4:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.5:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.6:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.7:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.8:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.9:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.10:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.11:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:3.4.11e:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.5:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.6:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.7:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.8:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.9:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:4.9.10:*:*:*:*:*:*:*

History

20 Nov 2024, 23:36

Type Values Removed Values Added
References () http://www.inter7.com/vpopmail/ChangeLog - () http://www.inter7.com/vpopmail/ChangeLog -
References () http://www.securityfocus.com/archive/1/212036 - Patch, Vendor Advisory () http://www.securityfocus.com/archive/1/212036 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/3284 - Vendor Advisory () http://www.securityfocus.com/bid/3284 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/7076 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/7076 -

Information

Published : 2001-09-04 04:00

Updated : 2024-11-20 23:36


NVD link : CVE-2001-0990

Mitre link : CVE-2001-0990

CVE.ORG link : CVE-2001-0990


JSON object : View

Products Affected

inter7

  • vpopmail