PT-2006-4535 · Apple+1 · Macos X+1

Publicado 2006-07-17 · Atualizado 2018-10-18 · CVE-2006-3669

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mercury Messenger versions 1.7.1.1 and other versions

Description The issue allows local users to read chat logs from other users due to the world-readable permissions of the chat logs stored within the /Users directory on a multi-user Mac OS X platform.

Recommendations For Mercury Messenger version 1.7.1.1, consider changing the permissions of the chat logs to prevent other users from reading them. For other affected versions, change the permissions of the chat logs to restrict access to the intended user.

Correção

Identificadores relacionados

CVE-2006-3669

Produtos afetados

Macos X

Mercury Messenger

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/27767 · Nota
• http://securityfocus.com/archive/1/440243/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3669 · Nota de Segurança
• http://securityfocus.com/bid/19005 · Nota