CVE-2001-0990

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.inter7.com/vpopmail/ChangeLog
http://www.securityfocus.com/archive/1/212036Patch, Vendor Advisory
http://www.securityfocus.com/bid/3284Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7076
http://www.inter7.com/vpopmail/ChangeLog
http://www.securityfocus.com/archive/1/212036Patch, Vendor Advisory
http://www.securityfocus.com/bid/3284Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7076

Timeline

Published: Sep 4, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09917.5Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other CVE-2001-09927.5shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" paramete CVE-2001-09932.1sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure wit CVE-2001-09945.0Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input CVE-2001-09957.5PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to P CVE-2001-09966.4POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to CVE-2001-09977.5Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE CVE-2001-09985.0IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) t CVE-2001-09997.5Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is te CVE-2001-10002.1rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files v CVE-2001-10027.5The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is e CVE-2001-10034.6Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file