COMMAND

    Sun Internet Mail Server

SYSTEMS AFFECTED

    SunOS

PROBLEM

    Michal Krzysztofowicz found following.  He discovered, that during
    the   install    process,    SIMS   creates    a    world-readable
    /tmp/sims_setup.dat file,  which, among  the others,  contains all
    the passwords in clear text.  Here's the example:

        administrator-name=Directory Manager
        administrator-passwd=dupa.8
        administrator-passwd2=dupa.8
        siteadmin-name=siteadmin
        siteadmin-passwd=dupa.8
        siteadmin-passwd2=dupa.8

SOLUTION

    Nothing yet.