CVE-2006-4787

AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2006-09-14

Last modified

2024-08-07

Affected products

• Alphamail (Alphamail)

References

• http://secunia.com/advisories/21871
• http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog
• http://www.securityfocus.com/bid/19996
• http://www.vupen.com/english/advisories/2006/3592
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28907