CVE-1999-1236

Medium

Published: 01/10/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

34th percentile - higher than 34% of all known CVEs

Summary

Internet Anywhere Mail Server version 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from this file.

Risk Assessment

Storing passwords in plaintext poses a serious security risk, allowing local users unauthorized access to accounts.

Recommendation

It is recommended to immediately update the mail server to a newer version that does not store passwords in plaintext and implement password encryption mechanisms.

Original NVD description (English source)

Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.