medium6.4
CVE-2004-2642
Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender.
Impact
Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nathaniel Bray | Yeemp | Versions 0.5.1, 0.6, 0.6.1, 0.6.2, 0.7, 0.7.1 |
References
- NVD record
- CVE.org record
- http://deekoo.net/technocracy/yeemp/#advisory
- http://deekoo.net/technocracy/yeemp/changes.html
- http://secunia.com/advisories/12795
- http://securitytracker.com/id?1011586
- http://www.osvdb.org/10671
- http://www.securityfocus.com/bid/11353
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17692
- http://deekoo.net/technocracy/yeemp/#advisory
- http://deekoo.net/technocracy/yeemp/changes.html
- http://secunia.com/advisories/12795
- http://securitytracker.com/id?1011586
- http://www.osvdb.org/10671
- http://www.securityfocus.com/bid/11353
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17692