Home  >  CVE-2002-0110
CVE Details for CVE: CVE-2002-0110
Summary
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
Timestamps
Last major update 18-10-2016 - 02:16
Published 25-03-2002 - 05:00
Last modified 18-10-2016 - 02:16
References
Vulnerable Configurations
  • cpe:2.3:a:nevrona_designs:miramail:*:*:*:*:*:*:*:*
    cpe:2.3:a:nevrona_designs:miramail:*:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
2.1
Impact
2.9
Exploitability
3.9
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 3843
bugtraq 20020109 MiraMail 1.04 can give POP account access and details
cert-vn VU#245707
xf miramail-plaintext-auth-info(7855)