Description
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials.
References
- 3771 vdb-entry
- 10752 third-party-advisory
- https://sourceforge.net/project/shownotes.php?release_id=213427
- inlook-file-information-disclosure(14990) vdb-entry
- 9527 vdb-entry