CVEvulnerability

CVE-1999-1236

4.6 MEDIUM Published 1999-10-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 1999-10-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.

Affected configurations

• true north internet anywhere mail server 2.3.1 • true north internet anywhere mail server 3.1

References

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 Exploit, Vendor Advisory
http://www.securityfocus.com/bid/731 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3285 exchange.xforce.ibmcloud.com
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662 Exploit, Vendor Advisory
http://www.securityfocus.com/bid/731 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3285 exchange.xforce.ibmcloud.com