PT-2002-1196 · Nevrona Designs · Miramail

Published 2002-03-15 · Updated 2016-10-18 · CVE-2002-0110

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nevrona Designs MiraMail versions 1.04 and earlier

Description The issue concerns the storage of authentication information, including POP usernames and passwords, in plaintext within a .ini file. This allows an attacker to gain privileges by reading the passwords from the file.

Recommendations For versions 1.04 and earlier, consider encrypting or securely storing authentication information to prevent unauthorized access. As a temporary workaround, restrict access to the .ini file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0110

Affected Products

Miramail

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0110 · Security Note
• http://iss.net/security_center/static/7855.php · Vendor Advisory
• http://kb.cert.org/vuls/id/245707 · Note
• http://marc.info/?l=bugtraq&m=101063476715154&w=2 · Note
• http://securityfocus.com/bid/3843 · Note