CVE-2001-0990

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-09-04 · updated 2026-06-16

Description

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

Affected products

Inter7 Vpopmail: 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6 (+12)

References

http://www.inter7.com/vpopmail/ChangeLog
http://www.securityfocus.com/archive/1/212036
http://www.securityfocus.com/bid/3284
https://exchange.xforce.ibmcloud.com/vulnerabilities/7076
http://www.inter7.com/vpopmail/ChangeLog
http://www.securityfocus.com/archive/1/212036
http://www.securityfocus.com/bid/3284
https://exchange.xforce.ibmcloud.com/vulnerabilities/7076

Get alerted when CVE-2001-0990 or the next vulnerability affects your stack