Description
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
References
- 20000113 Misleading sense of security in Netscape mailing-list
- netscape-mail-notify-plaintext(4385) vdb-entry