[Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text

From: christopher neitzert (chris_at_neitzert.com)
Date: 12/28/03

  • Next message: Ag. System Administrator: "Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text" 
    To: full-disclosure@lists.netsys.com, bill@gkrellm.net
Date: Sat, 27 Dec 2003 15:03:36 -0800

    Hi all,

    I couldn't find this when searching through the list archives so I
    presume it hasn't been posted yet.

    From gkrellm-2.1.19 rpm base:

    ~user/.gkrellm/user-config stores passwords for IMAP, IMAP-CRAM-MD5,
    and POP in clear text.

    From ~user/.gkrellm/user-config 

    --
mail mailbox-remote IMAP_(CRAM-MD5) some.server.com "username"
"password" 143 "inbox"
--
Can anyone confirm that this is true on other versions/platforms?
happy gnu year!
Chris
-- 
Christopher Neitzert http://www.neitzert.com/~chris
chris@neitzert.com - GPG Key ID: 7DCC491B

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Ag. System Administrator: "Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text"

    Relevant Pages