PT-1999-1674 · Nosque · Nosque Msgcore

Published 1999-09-07 · Updated 2017-04-29 · CVE-1999-1353

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Nosque MsgCore version 2.14

Description: The issue allows local users to gain privileges due to the storage of passwords in cleartext. Specifically, the administrator password is stored in the AdmPasswd registry key, and user passwords are stored in the Userbase.dbf data file.

Recommendations: For Nosque MsgCore version 2.14, consider restricting access to the AdmPasswd registry key and the Userbase.dbf data file to minimize the risk of exploitation. As a temporary workaround, limit local user privileges until a more secure password storage method is implemented. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-1999-1353

Affected Products

Nosque Msgcore

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1353 · Security Note
• http://marc.info/?l=ntbugtraq&m=93698162708211&w=2 · Note