CVE-2001-0990 | BDVDB-2026-3203 Detail

Description#

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.inter7.com/vpopmail/ChangeLog
https://exchange.xforce.ibmcloud.com/vulnerabilities/7076
http://www.securityfocus.com/archive/1/212036
http://www.securityfocus.com/bid/3284

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.