2 matches found
CVE-2000-0091
CVE-2000-0091 describes a buffer overflow in the vchkpw/vpopmail POP authentication package. An attacker can trigger a overflow by sending a long username or password, potentially gaining root privileges remotely. The description specifies the vulnerable component but does not provide concrete fi...
CVE-2001-0990
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, stores authentication data in cleartext inside the libvpopmail.a library. This enables local users to recover MySQL credentials by inspecting vpopmail programs linked against the library. Affected component: vpopmail (MySQL module)...