PT-1999-1674 · Nosque · Nosque Msgcore

Publicado

1999-09-07

·

Atualizado

2017-04-29

·

CVE-1999-1353

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Nosque MsgCore version 2.14
Description: The issue allows local users to gain privileges due to the storage of passwords in cleartext. Specifically, the administrator password is stored in the AdmPasswd registry key, and user passwords are stored in the Userbase.dbf data file.
Recommendations: For Nosque MsgCore version 2.14, consider restricting access to the AdmPasswd registry key and the Userbase.dbf data file to minimize the risk of exploitation. As a temporary workaround, limit local user privileges until a more secure password storage method is implemented. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-1999-1353

Produtos afetados

Nosque Msgcore