Debian Security Advisory DSA 900-1 – Thomas Wolff discovered that the fetchmailconfig program which is provided as part of fetchmail, an SSL enabled POP3, APOP, IMAP mail gatherer/forwarder, creates the new configuration in an insecure fashion that can lead to leaking passwords for mail accounts to local users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41693/dsa-900-1.txt
Source: https://packetstormsecurity.com/files/41693/Debian-Linux-Security-Advisory-900-1.html