CVE-2006-4787

AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/21871	Patch Vendor Advisory
http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog
http://www.securityfocus.com/bid/19996
http://www.vupen.com/english/advisories/2006/3592
https://exchange.xforce.ibmcloud.com/vulnerabilities/28907

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:alphamail:alphamail:1.0:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.1:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.2:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.3:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.4:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.5:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.6:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.7:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.8:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.9:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.10:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.11:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.12:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.13:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.14:::::::*
	cpe:2.3:a:alphamail:alphamail:1.0.15:::::::*

History

No history.

Information

Published : 2006-09-14 10:07

Updated : 2024-02-28 11:01

NVD link : CVE-2006-4787

Mitre link : CVE-2006-4787

CVE.ORG link : CVE-2006-4787

JSON object : View

Products Affected

alphamail

alphamail

CWE

NVD-CWE-Other

{"id": "CVE-2006-4787", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-09-14T10:07:00.000", "references": [{"url": "http://secunia.com/advisories/21871", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19996", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3592", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28907", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information."}, {"lang": "es", "value": "AlphaMail anterior a 1.0.16 permite a usuarios locales obtener informaci\u00f3n sensible mediante la funcionalidad de registro de eventos, que muestra contrase\u00f1as no cifradas en un mensaje de error. NOTA: algunos detalles se han obtenido de informaci\u00f3n de terceros."}], "lastModified": "2017-07-20T01:33:18.773", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alphamail:alphamail:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25B87F8E-B9DB-4606-AB7F-C53549136B19"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A70FD38-A84C-48E4-8843-DE04B6DDA517"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0D48B4F-CA37-434B-9A89-5BD574936956"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE78C33D-5BEF-4D48-8E60-C9D21565E293"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6E9EB4C-43DA-4B10-9E12-F8DCB2D83BDC"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FD084E5-418E-4D0B-8F7E-7EB5D43EF2FF"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67DD7470-4861-4EFD-A8A3-75D1B21DD525"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CD81998-6B35-4278-9D89-3B4838AA2159"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "713E74CA-D0E4-4A03-B461-E713A9AC7A6E"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A114BF3E-F9F6-4784-B1C2-AFA4ACFB81B4"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAB89CB3-6FEA-4B9C-9278-EA28B70EA1A1"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "170FAB77-F67A-4FD5-BCAD-44DC10BDB080"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14DE799F-D423-46EC-BF5C-EAC563D58DE4"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BFAFB51-F1E2-4489-9AA0-4B7761130780"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24A71B93-BBA6-450C-A14A-7DBDDE1E4CF7"}, {"criteria": "cpe:2.3:a:alphamail:alphamail:1.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "018A660A-94CD-4DD2-8F2F-429A514D79F7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}