JVN#19445002 APOP password recovery vulnerability

Impact

APOP passwords may be compromised. When the same password is used for other systems, those systems could be compromised as well.

Solution

Products Affected

• Mail clients with an APOP implementation
  As this is a protocol issue, software fixes cannot solve the issue essentially. Encrypted communications such as POP over SSL are recommended. Moreover, users should use different passwords for different services or accounts to minimize the risk of their accounts to be compromised.