PT-2002-1196 · Nevrona Designs · Miramail

Publicado 2002-03-15 · Atualizado 2016-10-18 · CVE-2002-0110

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nevrona Designs MiraMail versions 1.04 and earlier

Description The issue concerns the storage of authentication information, including POP usernames and passwords, in plaintext within a .ini file. This allows an attacker to gain privileges by reading the passwords from the file.

Recommendations For versions 1.04 and earlier, consider encrypting or securely storing authentication information to prevent unauthorized access. As a temporary workaround, restrict access to the .ini file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0110

Produtos afetados

Miramail

Referências · 5

• http://kb.cert.org/vuls/id/245707 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0110 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101063476715154&w=2 · Nota
• http://iss.net/security_center/static/7855.php · Aviso do Fabricante
• http://securityfocus.com/bid/3843 · Nota