PT-2004-2945 · Esesix · Esesix Thintune

Dirk Loss · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2049

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eSeSIX Thintune thin clients versions 2.4.38 and earlier

Description The issue allows attackers to gain access by storing sensitive usernames and passwords in cleartext in configuration files for the keeper library.

Recommendations For versions 2.4.38 and earlier, update the firmware to a version that does not store sensitive information in cleartext, or consider restricting access to the configuration files of the keeper library until a patch is available.

Correção

Identificadores relacionados

CVE-2004-2049

Produtos afetados

Esesix Thintune

Referências · 7

• http://marc.info/?l=bugtraq&m=109068491801021&w=2 · Nota
• http://securitytracker.com/id?1010770 · Nota
• http://secunia.com/advisories/12154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2049 · Nota de Segurança
• http://osvdb.org/8247 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16795 · Nota
• http://securityfocus.com/bid/10794 · Nota