CVE Vulnerabilities

CVE-2004-2337

Published: Dec 31, 2004 | Modified: Nov 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials.

Affected Software

Name Vendor Start Version End Version
Inlook Inlook 0.6.0 (including) 0.6.0 (including)
Inlook Inlook 0.6.1 (including) 0.6.1 (including)
Inlook Inlook 0.6.2 (including) 0.6.2 (including)
Inlook Inlook 0.6.3 (including) 0.6.3 (including)
Inlook Inlook 0.6.4 (including) 0.6.4 (including)
Inlook Inlook 0.6.5 (including) 0.6.5 (including)
Inlook Inlook 0.6.6 (including) 0.6.6 (including)
Inlook Inlook 0.6.7 (including) 0.6.7 (including)
Inlook Inlook 0.6.8 (including) 0.6.8 (including)
Inlook Inlook 0.6.9 (including) 0.6.9 (including)
Inlook Inlook 0.6.10.0 (including) 0.6.10.0 (including)
Inlook Inlook 0.6.11 (including) 0.6.11 (including)
Inlook Inlook 0.6.12 (including) 0.6.12 (including)
Inlook Inlook 0.6.13 (including) 0.6.13 (including)
Inlook Inlook 0.6.14 (including) 0.6.14 (including)
Inlook Inlook 0.7.0 (including) 0.7.0 (including)
Inlook Inlook 0.7.1 (including) 0.7.1 (including)
Inlook Inlook 0.7.2 (including) 0.7.2 (including)
Inlook Inlook 0.7.3 (including) 0.7.3 (including)

References