PT-2013-4905 · Intel · Intel Wimax Network Service

Florian Weimer · Publicado 2013-08-25 · Atualizado 2013-08-26 · CVE-2013-4217

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2

Description The issue allows local users to obtain sensitive information by reading a log file due to the logging of a cleartext password during certain attempts to set a password by the OSAL Crypt SetEncryptedPassword function.

Recommendations For Intel WiMAX Network Service versions through 1.5.2, consider restricting access to log files to minimize the risk of exploitation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-4217

Produtos afetados

Intel Wimax Network Service

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4217 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/08/08/17 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=911121 · Nota