PT-2006-4541 · Unknown · Passwordsafe

J.R. Wikes · Publicado 2006-07-28 · Atualizado 2018-10-18 · CVE-2006-3675

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Password Safe versions 2.11 through 3.0BETA1

Description The issue concerns the password database locking mechanism. When specific dialogue windows are open, the configuration settings for locking the database are not respected. This could allow attackers with physical access to obtain the database contents.

Recommendations For versions 2.11 through 3.0BETA1, consider implementing additional access controls to the password database when dialogue windows are open, such as manually locking the database or restricting physical access to the device.

Exploit

Correção

Identificadores relacionados

CVE-2006-3675

Produtos afetados

Passwordsafe

Referências · 7

• 🔥 http://symantec.com/enterprise/research/SYMSA-2006-008.txt · Exploit
• 🔥 http://securitytracker.com/id?1016565 · Exploit
• 🔥 http://securityfocus.com/bid/19078 · Exploit
• http://securityfocus.com/archive/1/441040/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27933 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3675 · Nota de Segurança
• http://securityreason.com/securityalert/1308 · Nota