Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Communicator | Netscape | 4.7 (including) | 4.7 (including) |
Navigator | Netscape | * | * |