Description
Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes.
References
- 14997 vdb-entry
- 20051001 [Information Disclosure] NetForce v4.02 Sends NIS Password Maps mailing-list
- 17033 third-party-advisory