PT-2004-2945 · Esesix · Esesix Thintune

Dirk Loss · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2049

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eSeSIX Thintune thin clients versions 2.4.38 and earlier

Description The issue allows attackers to gain access by storing sensitive usernames and passwords in cleartext in configuration files for the keeper library.

Recommendations For versions 2.4.38 and earlier, update the firmware to a version that does not store sensitive information in cleartext, or consider restricting access to the configuration files of the keeper library until a patch is available.

Fix

Related Identifiers

CVE-2004-2049

Affected Products

Esesix Thintune

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-2049 · Security Note
• http://marc.info/?l=bugtraq&m=109068491801021&w=2 · Note
• http://securitytracker.com/id?1010770 · Note
• http://secunia.com/advisories/12154 · Note
• http://osvdb.org/8247 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16795 · Note
• http://securityfocus.com/bid/10794 · Note