Lucene search

[email protected]CVE-1999-1236

HistorySep 12, 2001 - 4:00 a.m.

CVE-1999-1236

2001-09-1204:00:00

[email protected]

web.nvd.nist.gov

internet anywhere mail server

password security

plaintext storage

local user risk

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.

Affected configurations

NVD

Node

true_northinternet_anywhere_mail_serverMatch2.3.1

true_northinternet_anywhere_mail_serverMatch3.1

CPENameOperatorVersion
true_north:internet_anywhere_mail_servertrue north internet anywhere mail servereq2.3.1
true_north:internet_anywhere_mail_servertrue north internet anywhere mail servereq3.1

CPE	Name	Operator	Version
true_north:internet_anywhere_mail_server	true north internet anywhere mail server	eq	2.3.1
true_north:internet_anywhere_mail_server	true north internet anywhere mail server	eq	3.1

References

www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662

www.securityfocus.com/bid/731

exchange.xforce.ibmcloud.com/vulnerabilities/3285

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-1999-1236

cvelist1 nvd1