Detections
Analytics

IlohaMail Unspecified Database Password Disclosure Weakness

medium Nessus Plugin ID 14636

Language:

Synopsis

The remote host is running a webmail application that is affected by an information disclosure vulnerability.

Description

The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table.

***** Nessus has determined the vulnerability exists on the target
***** simply by looking at the version number of IlohaMail
***** installed there.

Solution

Upgrade to IlohaMail version 0.7.0 or later.

See Also

http://www.nessus.org/u?066bde18

Plugin Details

Severity: Medium

ID: 14636

File Name: ilohamail_password_disclosure.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 9/2/2004

Updated: 8/15/2022

Supported Sensors: Nessus

Vulnerability Information

Vulnerability Publication Date: 3/22/2002