Description
AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.
References
- http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog
- alphamail-logging-password-disclosure(28907) vdb-entry
- ADV-2006-3592 vdb-entry
- 19996 vdb-entry
- 21871 third-party-advisory