CVE-2004-2337

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:inlook:inlook:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.5:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.6:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.7:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.8:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.9:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.10.0:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.11:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.12:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.13:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.6.14:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:inlook:inlook:0.7.3:*:*:*:*:*:*:*

History

20 Nov 2024, 23:53

Type Values Removed Values Added
References () http://secunia.com/advisories/10752/ - Patch, Vendor Advisory () http://secunia.com/advisories/10752/ - Patch, Vendor Advisory
References () http://www.osvdb.org/3771 - () http://www.osvdb.org/3771 -
References () http://www.securityfocus.com/bid/9527 - Patch () http://www.securityfocus.com/bid/9527 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/14990 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/14990 -
References () https://sourceforge.net/project/shownotes.php?release_id=213427 - Patch () https://sourceforge.net/project/shownotes.php?release_id=213427 - Patch

Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03


NVD link : CVE-2004-2337

Mitre link : CVE-2004-2337

CVE.ORG link : CVE-2004-2337


JSON object : View

Products Affected

inlook

  • inlook