ISS Security Alert regarding vpopmail 4.9.10 and below

[Hubbard, David]

Didn't see this on the list, but thought it would
be important to have shown here.  Let the sysadmins
lock things down a little bit if necessary.

Dave



Date Reported:          09/04/2001
Brief Description:      vpopmail insecure authentication data could
                        allow unauthorized access
Risk Factor:            Medium
Attack Type:            Host Based
Platforms Affected:     Vpopmail (vchkpw) 4.9.10 and earlier
Vulnerability:          vpopmail-insecure-auth-data
X-Force URL:            http://xforce.iss.net/static/7076.php