ipop2d contains a flaw that may allow a malicious user to retrieve arbitrary files. The issue is triggered when using the 'fold' command, which could allow a malicious user with a POP account to retrieve any world or group readable files resulting in a loss of confidentiality.
Classification
Location:
Remote / Network Access
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Third-party Verified
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
security-protocols.com -
security-protocols