CVE-1999-1236

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-1999-1236
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 Exploit Vendor Advisory
http://www.securityfocus.com/bid/731 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3285
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 Exploit Vendor Advisory
http://www.securityfocus.com/bid/731 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3285
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:true_north:internet_anywhere_mail_server:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:true_north:internet_anywhere_mail_server:3.1:*:*:*:*:*:*:*
History

20 Nov 2024, 23:30

Type Values Removed Values Added
References () http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 - Exploit, Vendor Advisory () http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 - Exploit, Vendor Advisory
References () http://www.securityfocus.com/bid/731 - Vendor Advisory () http://www.securityfocus.com/bid/731 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/3285 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/3285 -
Information

Published : 1999-10-01 04:00

Updated : 2024-11-20 23:30

NVD link : CVE-1999-1236

Mitre link : CVE-1999-1236

CVE.ORG link : CVE-1999-1236

JSON object : View

Products Affected

true_north

  • internet_anywhere_mail_server
CWE
NVD-CWE-Other