CVE-2001-0990

Published: Sep 4, 2001Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

Affected (18)

Products: Inter7: Vpopmail

Inter7

1 product

Vpopmail

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Inter7 Vpopmail	Version 3.4.10
Inter7 Vpopmail	Version 3.4.11
Inter7 Vpopmail	Version 3.4.11e
Inter7 Vpopmail	Version 3.4.1
Inter7 Vpopmail	Version 3.4.2
Inter7 Vpopmail	Version 3.4.3
Inter7 Vpopmail	Version 3.4.4
Inter7 Vpopmail	Version 3.4.5
Inter7 Vpopmail	Version 3.4.6
Inter7 Vpopmail	Version 3.4.7
Inter7 Vpopmail	Version 3.4.8
Inter7 Vpopmail	Version 3.4.9
Inter7 Vpopmail	Version 4.5
Inter7 Vpopmail	Version 4.6
Inter7 Vpopmail	Version 4.7
Inter7 Vpopmail	Version 4.8
Inter7 Vpopmail	Version 4.9.10
Inter7 Vpopmail	Version 4.9