PT-2005-1576 · Chat Anywhere · Chat Anywhere

Publicado 2005-02-23 · Atualizado 2008-09-05 · CVE-2005-0522

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Chat Anywhere version 2.72a

Description The issue allows local users to gain privileges by accessing sensitive information stored in plaintext in the .INI file for a chatroom. This includes passwords.

Recommendations For version 2.72a, consider encrypting or securely storing sensitive information, such as passwords, to prevent unauthorized access. As a temporary workaround, restrict access to the .INI file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0522

Produtos afetados

Chat Anywhere

Referências · 3

• 🔥 https://exploit-db.com/exploits/837 · Exploit
• http://securitytracker.com/id?1013270 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0522 · Nota de Segurança