Description
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
References
- VU#245707 third-party-advisory
- miramail-plaintext-auth-info(7855) vdb-entry
- 3843 vdb-entry
- 20020109 MiraMail 1.04 can give POP account access and details mailing-list