PT-2005-2116 · Rebrand · Rebrand P2P Share Spy

Publicado 2005-04-13 · Atualizado 2008-09-05 · CVE-2005-1097

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rebrand P2P Share Spy version 2.2

Description The issue allows local users to gain privileges because it stores the user password in plaintext in the txtPassword value in the registry.

Recommendations For version 2.2, consider removing or securing the txtPassword value from the registry to prevent unauthorized access until a proper fix is available. As a temporary workaround, restrict local access to the system to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1097

Produtos afetados

Rebrand P2P Share Spy

Referências · 3

• 🔥 https://exploit-db.com/exploits/920 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1097 · Nota de Segurança
• http://securitytracker.com/id?1013673 · Nota