Description
Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender.
References
- http://deekoo.net/technocracy/yeemp/#advisory
- 1011586 vdb-entry
- http://deekoo.net/technocracy/yeemp/changes.html
- 10671 vdb-entry
- 12795 third-party-advisory
- 11353 vdb-entry
- yeemp-message-spoofing(17692) vdb-entry