PT-2004-3598 · Gyach · Gyach-E

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2708

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gyach Enhanced (Gyach-E) versions prior to 1.0.0

Description The issue allows attackers to obtain user passwords by reading the configuration file, as passwords are stored in plaintext.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2004-2708

Affected Products

Gyach-E

References · 3

• http://phrozensmoke.com/projects/pyvoicechat/changelog.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2708 · Security Note
• http://osvdb.org/8834 · Note