PT-2002-1409 · Hotline · Hotline Client

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hotline Client version 1.8.5

Description The issue concerns the storage of sensitive user information. Hotline Client stores passwords in plaintext in the bookmarks file. This could allow local users with access to the bookmarks file to extract the passwords and gain privileges.

Recommendations For Hotline Client version 1.8.5, consider removing or securing access to the bookmarks file to prevent unauthorized access to stored passwords. As a temporary workaround, avoid storing sensitive information in the bookmarks file until a more secure method of storage is implemented.

Exploit

Correção

Identificadores relacionados

CVE-2002-0343

Produtos afetados

Hotline Client

Referências · 4

• 🔥 http://securityfocus.com/bid/4210 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0343 · Nota de Segurança
• http://iss.net/security_center/static/8327.php · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=101495128121299&w=2 · Nota