| Package | Affected versions | Patched versions |
|---|---|---|
| inlook | = 0.6.0= 0.6.1= 0.6.10.0= 0.6.11= 0.6.12= 0.6.13= 0.6.14= 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.6.7= 0.6.8= 0.6.9= 0.7.0= 0.7.1= 0.7.2= 0.7.3 |
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free