PT-1999-1877 · Wvdial · Wvdial

Publicado 1999-12-14 · Atualizado 2008-09-10 · CVE-2000-0361

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions wvdial versions 1.4 and earlier

Description The issue concerns the PPP wvdial.lxdialog script in wvdial, which creates a .config file with world-readable permissions. This allows a local attacker in the dialout group to access login and password information.

Recommendations For wvdial versions 1.4 and earlier, consider restricting access to the .config file created by the wvdial.lxdialog script to prevent unauthorized access to login and password information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0361

Produtos afetados

Wvdial

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0361 · Nota de Segurança
• http://novell.com/linux/security/advisories/suse_security_announce_35.html · Nota