Lucene search

MitreCVE-1999-1366

HistorySep 12, 2001 - 4:00 a.m.

CVE-1999-1366

2001-09-1204:00:00

mitre

web.nvd.nist.gov

pegasus e-mail client

weak encryption

pop3 passwords

local users

nvd

cve-1999-1366.

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

Percentile

5.1%

JSON

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.

Affected configurations

Nvd

Node

david_harrispegasus_mailRange≤3.0

VendorProductVersionCPE
david_harrispegasus_mail*cpe:2.3:a:david_harris:pegasus_mail:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
david_harris	pegasus_mail	*	cpe:2.3:a:david_harris:pegasus_mail::::::::

References

marc.info/?l=bugtraq&m=92714118829880&w=2

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-1999-1366