PT-2001-2135 · Unknown · Passwordsafe

Published 2001-09-13 · Updated 2017-12-20 · CVE-2001-0984

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Password Safe version 1.7(1)

Description The issue allows an attacker with access to the memory, such as an administrator, to read passwords that are left in cleartext when a user copies the password to the clipboard and minimizes Password Safe. This occurs when the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options are enabled.

Recommendations For Password Safe version 1.7(1), consider disabling the clipboard copying feature or the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options as a temporary workaround until a patch is available. Alternatively, restrict access to the system memory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0984

Affected Products

Passwordsafe

References · 4

• http://securityfocus.com/bid/3337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0984 · Security Note
• http://securityfocus.com/archive/1/213931 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7123 · Note