Vulnerability in David Harris Pegasus Mail

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.

EPSS: 0.002 (10.7th percentile) — read the EPSS interpretation.

Affected products

References