CVE-1999-1554

SGI IRIX issue CVE-1999-1554: The /usr/sbin/Mail program does not properly set the group ID to the start-user’s group, enabling local users to read others’ mail on SGI IRIX 3.3 and 3.3.1. Root cause: group ID handling in Mail is incorrect. Impact: local privilege/ownership breach by reading mail ...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...

CVE-2000-1197

POP2 or POP3 server pop3d in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service lack of mail access for other users by creating lock files for other mail boxes...

PT-2001-1232 · Qpopper · Qpopper

Name of the Vulnerable Software and Affected Versions: qpopper affected versions not specified Description: The qpopper POP server creates lock files with predictable names. This allows local users to cause a denial of service for other users, resulting in a lack of mail access, by creating lock...

CVE-1999-0825

CVE-1999-0825 affects UnixWare: default permissions on /var/mail allow local users to read and modify other users’ mail, risking partial confidentiality and integrity (CVSSv2: 3.6/6.0, LOCAL). The connected documents do not provide explicit exploitation details or remediation steps; no affected v...

Qualcomm qpopper 3.0 - LIST Remote Buffer Overflow

Qualcomm qpopper 3.0 - LIST Remote Buffer Overflow // source: https://www.securityfocus.com/bid/948/info A remotely exploitable buffer-overflow vulnerability affects Qualcomm's 'qpopper' daemon. This issue allows users already in possession of a username and password for a POP account to compromi...

CVE-2000-0068

daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...

SCO Unixware 7.1 - '/var/mail' Permissions

source: https://www.securityfocus.com/bid/849/info Certain versions of SCO's UnixWare only 7.1 was tested ship with the /var/mail/ directory with permission 777-rwxrwxrwx . This in effect allows malicious users to read incoming mail for users who do not yet have a mail file /var/mail/username...