PT-2005-3941 · Macromedia · Macromedia Breeze

Published 2005-09-30 · Updated 2008-09-05 · CVE-2005-3112

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Macromedia Breeze version 5.0

Description The issue concerns the storage of passwords in the database. Instead of storing hashed passwords, the "reset password" feature stores passwords in plaintext. This allows attackers with access to the database to obtain the passwords.

Recommendations For Macromedia Breeze version 5.0, consider modifying the "reset password" feature to store passwords securely using a hashing mechanism instead of plaintext. As a temporary workaround, restrict access to the database to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3112

Affected Products

Macromedia Breeze

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-3112 · Security Note
• http://macromedia.com/go/mpsb05-06 · Vendor Advisory
• http://securityfocus.com/bid/14975 · Note
• http://securitytracker.com/id?1014990 · Note
• http://secunia.com/advisories/17009 · Note