The account passwords are stored in "HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Domains\[domain name]\Users" and can be reverted to plain-text.
Classification
Location:
Local Access Required
Attack Type:
Cryptographic
Impact:
Loss of Confidentiality
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Vendor Verified,
Coordinated Disclosure
Solution
OSVDB is not aware of a solution for this vulnerability.
