PT-2005-4023 · Aenovo · Aenovo+2

Devil_Box + 2 · Publicado 2005-10-14 · Atualizado 2017-07-11 · CVE-2005-3209

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aeNovo products (affected versions not specified)

Description The issue concerns the storage of password information in plaintext within certain tables of aeNovo products, including aeNovo, aeNovoShop, and aeNovoWYSI. Specifically, the control, content, and page tables contain plaintext passwords. This allows attackers who have access to the database to obtain these passwords and potentially gain privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-3209

Produtos afetados

Aenovo

Aenovoshop

Aenovowysi

Referências · 6

• 🔥 http://kapda.ir/advisory-78.html · Exploit
• http://osvdb.org/19939 · Nota
• http://marc.info/?l=bugtraq&m=112872593432359&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3209 · Nota de Segurança
• http://secunia.com/advisories/17117 · Aviso do Fabricante