Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nevrona MiraMail敏感信息明文储存漏洞
Vulnerability Description
MiraMail是一个新闻组服务器软件,由Nevrona Designs公司开发和维护。 MiraMail存在设计问题,可以使本地攻击者得到任意用户的POP帐号名和口令。 MiraMail把用户POP帐号的认证信息以明文存放在一个.ini文件中,任何可以访问MiraMail安装目录的人都可以读取这个文件,从而取得其他用户的POP帐号信息。
CVSS Information
N/A
Vulnerability Type
N/A