Description
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
References
- 20040923 Multiple vulnerabilities in ActivePost Standard 3.1 mailing-list
- 12642 third-party-advisory
- http://aluigi.altervista.org/adv/actp-adv.txt
- 11244 vdb-entry
- activepost-plaintext-password(17486) vdb-entry
- 1011406 vdb-entry