CVE-2006-4787 AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from...
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alphamail | = 1.0 | No fix listed |
| alphamail | = 1.0.1 | No fix listed |
| alphamail | = 1.0.2 | No fix listed |
| alphamail | = 1.0.3 | No fix listed |
| alphamail | = 1.0.4 | No fix listed |
| alphamail | = 1.0.5 | No fix listed |
| alphamail | = 1.0.6 | No fix listed |
| alphamail | = 1.0.7 | No fix listed |
| alphamail | = 1.0.8 | No fix listed |
| alphamail | = 1.0.9 | No fix listed |
| alphamail | = 1.0.10 | No fix listed |
| alphamail | = 1.0.11 | No fix listed |
| alphamail | = 1.0.12 | No fix listed |
| alphamail | = 1.0.13 | No fix listed |
| alphamail | = 1.0.14 | No fix listed |
| alphamail | = 1.0.15 | No fix listed |
References
- 21871 patch third-party-advisory vendor-advisory
- whizzo.uoregon.edu
- 19996 vdb-entry
- ADV-2006-3592 vdb-entry
- alphamail-logging-password-disclosure(28907) vdb-entry