CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.

• http://www.inter7.com/vpopmail/ChangeLog
• http://www.securityfocus.com/archive/1/212036Patch, Vendor Advisory
• http://www.securityfocus.com/bid/3284Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7076
• http://www.inter7.com/vpopmail/ChangeLog
• http://www.securityfocus.com/archive/1/212036Patch, Vendor Advisory
• http://www.securityfocus.com/bid/3284Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7076

Published

Sep 4, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0984Password Safe 1.7(1) leaves cleartext passwords in memory wh…
• CVE-2001-0985shop.pl in Hassan Consulting Shopping Cart 1.23 allows remot…
• CVE-2001-0986SQLQHit.asp sample file in Microsoft Index Server 2.0 allows…
• CVE-2001-0987Cross-site scripting vulnerability in CGIWrap before 3.7 all…
• CVE-2001-0988Arkeia backup server 4.2.8-2 and earlier creates its databas…
• CVE-2001-0989Buffer overflows in Pileup before 1.2 allows local users to …
• CVE-2001-0991Cross-site scripting vulnerability in Proxomitron Naoko-4 Be…
• CVE-2001-0992shopplus.cgi in ShopPlus shopping cart allows remote attacke…
• CVE-2001-0993sendmsg function in NetBSD 1.3 through 1.5 allows local user…
• CVE-2001-0994Marconi ForeThought 7.1 allows remote attackers to cause a d…
• CVE-2001-0995PHProjekt before 2.4a allows remote attackers to perform act…
• CVE-2001-0996POP3Lite before 0.2.4 does not properly quote a . (dot) in a…