Description
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.
References
- 16289 third-party-advisory
- trillian-mail-plaintext-password(21667) vdb-entry
- 20050730 Trillian Ver 3.1 saves password's in plain Text mailing-list