Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_anywhere_mail_server | True_north | 2.3.1 (including) | 2.3.1 (including) |
| Internet_anywhere_mail_server | True_north | 3.1 (including) | 3.1 (including) |
References
- http://www.ntbugtraq.com/default.asp?pid=36\u0026sid=1\u0026A2=ind9910\u0026L=ntbugtraq\u0026F=\u0026S=\u0026P=662
- http://www.securityfocus.com/bid/731
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3285
- http://www.ntbugtraq.com/default.asp?pid=36\u0026sid=1\u0026A2=ind9910\u0026L=ntbugtraq\u0026F=\u0026S=\u0026P=662
- http://www.securityfocus.com/bid/731
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3285