Insecure World-Readable Permissions in fetchmailconf before 1.49

CVE-2005-3088 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.

Learn more about our User Device Pen Test.