high7.2Public exploit code
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch IMail Server 5.0/5.0.5/5.0.6/5.0.7/5.0.8/6.0 - Weak Password Encryption1999-12-19 · local · windows · Verified
- IPSwitch IMail Server 8.1 - Local Password Decryption Utility2004-08-18 · local · windows · Verified
Impact
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | Versions 5.0, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 6.0 |