Security Basics mailing list archives

Re: POP3 passwords


From: "Meritt James" <meritt_james () bah com>
Date: Mon, 20 Oct 2003 16:16:47 -0400

The less-than-brilliant POP3 passwords oft provide a simple method of
getting the passwords to OTHER things.  Like the account that that mail
is residing...  And with the leverage point, the world may be moved...

No timeouts, no encryptions, ...  

Sad, but true.

Jim

Dave Killion wrote:

Zac,

Well, you're right - people don't think much about POP3 passwords, but they
should.


-- 
James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566

---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
----------------------------------------------------------------------------


Current thread: