PT-2005-4225 · Rockliffe · Rockliffe Mailsite Express

Paul Craig · Publicado 2005-11-02 · Atualizado 2017-07-11 · CVE-2005-3429

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rockliffe MailSite Express versions prior to 6.1.22

Description The issue allows local users to obtain passwords by reading the cookie file or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities, because it saves user passwords in plaintext in cookies when the option to save login information is enabled.

Recommendations For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue. As a temporary workaround, consider disabling the option to save login information to prevent passwords from being saved in plaintext in cookies. Restrict access to the cookie file to minimize the risk of local users obtaining passwords. Avoid using the password variable in cookie files until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-3429

Produtos afetados

Rockliffe Mailsite Express

Referências · 8

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html · Exploit
• 🔥 http://security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22906 · Nota
• http://osvdb.org/22682 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3429 · Nota
• http://securitytracker.com/id?1015117 · Nota
• http://marc.info/?l=bugtraq&m=113053680631151&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3429 · Nota de Segurança