Vulnerability in Ntlmaps
CVE-2005-2962
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.
EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.
Affected products
- Ntlmaps
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_BID)