Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote malicious user to sniff usernames and passwords in plaintext.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
netscape communicator 4.7 |
||
netscape navigator |