PT-2007-1233 · Globetrotter · Globetrotter Mobility Manager

Publicado 2007-01-29 · Atualizado 2018-10-16 · CVE-2006-6953

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: GlobeTrotter Mobility Manager (affected versions not specified)

Description: The issue concerns the virtual keyboard implementation, which changes the color of a key as it is pressed. This allows local users to capture arbitrary keystrokes, such as passwords, through methods like shoulder surfing or by grabbing periodic screenshots.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2006-6953

Produtos afetados

Globetrotter Mobility Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6953 · Nota de Segurança
• http://img45.imageshack.us/my.php?image=poc7ik.jpg · Nota
• http://securityfocus.com/archive/1/438376/100/100/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27447 · Nota