Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-02-02T05:00:00

Updated: 2024-08-08T04:37:07.064Z

Reserved: 2002-01-31T00:00:00

Link: CVE-2001-0990

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2001-09-04T04:00:00.000

Modified: 2017-12-19T02:29:30.067

Link: CVE-2001-0990

cve-icon Redhat

No data.