Unscored CVE-1999-1275 EUVD-1999-1256GHSA-7mxx-wrm5-32f9

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local use…

Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre

Description

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.

References

lotus-ccmail-passwords(1619) vdb-entry
19970908 Password unsecurity in cc:Mail release 8 mailing-list