The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nullmailer | Gentoo | 1.11 (including) | 1.11 (including) |
| Nullmailer | Ubuntu | lucid | * |
| Nullmailer | Ubuntu | precise | * |
| Nullmailer | Ubuntu | upstream | * |