PT-2005-3941 · Macromedia · Macromedia Breeze

Publicado 2005-09-30 · Atualizado 2008-09-05 · CVE-2005-3112

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Macromedia Breeze version 5.0

Description The issue concerns the storage of passwords in the database. Instead of storing hashed passwords, the "reset password" feature stores passwords in plaintext. This allows attackers with access to the database to obtain the passwords.

Recommendations For Macromedia Breeze version 5.0, consider modifying the "reset password" feature to store passwords securely using a hashing mechanism instead of plaintext. As a temporary workaround, restrict access to the database to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3112

Produtos afetados

Macromedia Breeze

Referências · 5

• http://securityfocus.com/bid/14975 · Nota
• http://securitytracker.com/id?1014990 · Nota
• http://secunia.com/advisories/17009 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3112 · Nota de Segurança
• http://macromedia.com/go/mpsb05-06 · Aviso do Fabricante