Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
| Software | From | Fixed in |
|---|---|---|
| true_north / internet_anywhere_mail_server | 2.3.1 | 2.3.1.x |
| true_north / internet_anywhere_mail_server | 3.1 | 3.1.x |