Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
fetchmail口令泄露漏洞
Vulnerability Description
fetchmail是用于从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传输代理的软件包。 fetchmailconf工具程序写配置文件的方式存在漏洞，本地攻击者可能利用此漏洞获取访问口令。 fetchmailconf默认的行为是写出短期内完全可读的配置文件。在fetchmailconf设置安全的权限之前，这个配置文件可能在很短的窗口中为本地恶意攻击者提供口令。
CVSS Information
N/A
Vulnerability Type
N/A