VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 4, 2001· Updated Jun 16, 2026

CVE-2001-0990

CVE-2001-0990

Description

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

Affected products

19
  • Double Precision Incorporated/Vpopmail \(vchkpw\)19 versions
    cpe:2.3:a:inter7:vpopmail:3.4.1:*:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:inter7:vpopmail:3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.11e:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:3.4.9:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.9:*:*:*:*:*:*:*
    • cpe:2.3:a:inter7:vpopmail:4.9.10:*:*:*:*:*:*:*
    • (no CPE)range: <=4.10.35

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.