Vulnerabilities (CVE)

Filtered by vendor Gentoo Subscribe
Filtered by product Nullmailer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4223 1 Gentoo 1 Nullmailer 2023-12-10 5.0 MEDIUM N/A
The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.