Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Navigator | Netscape | * | * |
Communicator | Netscape | 4.7 | 4.7 |