[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text

To: full-disclosure@lists.netsys.com, bill@gkrellm.net
Subject: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text
From: christopher neitzert <chris@neitzert.com>
Date: Sat, 27 Dec 2003 15:03:36 -0800

Hi all,

I couldn't find this when searching through the list archives so I
presume it hasn't been posted yet.

From gkrellm-2.1.19 rpm base:

~user/.gkrellm/user-config  stores passwords for IMAP, IMAP-CRAM-MD5,
and POP in clear text.

From ~user/.gkrellm/user-config
--
mail mailbox-remote IMAP_(CRAM-MD5) some.server.com "username"
"password" 143 "inbox"
--

Can anyone confirm that this is true on other versions/platforms?

happy gnu year!

Chris


-- 
Christopher Neitzert http://www.neitzert.com/~chris
chris@neitzert.com - GPG Key ID: 7DCC491B

Attachment: signature.asc
Description: This is a digitally signed message part

Follow-Ups:
- Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text
  - From: "Ag. System Administrator" <sysadmin@agent.co.il>
- Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text
  - From: Jérôme Augé <eguaj@free.fr>

Prev by Date: [Full-Disclosure] Sears variant
Next by Date: Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text
Previous by thread: [Full-Disclosure] Sears variant
Next by thread: Re: [Full-Disclosure] gkrellm 2.1.19 email user/password storage in clear text
Index(es):
- Date
- Thread