PT-2002-1409 · Hotline · Hotline Client

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hotline Client version 1.8.5

Description The issue concerns the storage of sensitive user information. Hotline Client stores passwords in plaintext in the bookmarks file. This could allow local users with access to the bookmarks file to extract the passwords and gain privileges.

Recommendations For Hotline Client version 1.8.5, consider removing or securing access to the bookmarks file to prevent unauthorized access to stored passwords. As a temporary workaround, avoid storing sensitive information in the bookmarks file until a more secure method of storage is implemented.

Exploit

Fix

Related Identifiers

CVE-2002-0343

Affected Products

Hotline Client

References · 4

• 🔥 http://securityfocus.com/bid/4210 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0343 · Security Note
• http://iss.net/security_center/static/8327.php · Vendor Advisory
• http://marc.info/?l=bugtraq&m=101495128121299&w=2 · Note