smtp file in pam.d directory on some distributions is world readable.
george_yohng brought this to the forum.
The smtp file on some distributions is world readable. As we store information such as database, user, pass, fields in this file it could be read by any user on the system or even a php script etc.
Specifically OpenSuSE 11.2