CVE-1999-1497: Weak Encryption
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Ipswitch IMailfrom your environment.Uninstall Ipswitch IMail versions 5.0 and 6.0 from affected hosts if the product is not required, to eliminate storage of passwords using the weak encryption method.
- Compensating control
Restrict local access to affected systems and Windows registry hives containing IMail account data: enforce least-privilege for local accounts, limit administrative access to trusted users, apply host-based access controls and endpoint protection, and isolate affected hosts on the network to reduce exposure to local attackers.
- Operational
Assume stored IMail account passwords may be exposed and rotate/reset all e-mail account credentials that were stored by Ipswitch IMail 5.0 or 6.0 after removing or isolating the vulnerable installation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1497?
The severity of CVE-1999-1497 is classified as high due to weak encryption of passwords which allows local attackers to read sensitive information.
How do I fix CVE-1999-1497?
To fix CVE-1999-1497, upgrade to a version of Ipswitch IMail that uses strong encryption for password storage.
Which versions of Ipswitch IMail are affected by CVE-1999-1497?
CVE-1999-1497 affects Ipswitch IMail versions 5.0, 5.0.5, 5.0.6, 5.0.7, 5.0.8, and 6.0.
What are the implications of CVE-1999-1497?
The implications of CVE-1999-1497 include unauthorized access to email accounts due to weak password encryption.
Are there any workarounds for CVE-1999-1497?
Temporary workarounds for CVE-1999-1497 may include limiting local access to the system until a software upgrade can be performed.