PT-2005-4023 · Aenovo · Aenovo+2

Devil_Box + 2 · Published 2005-10-14 · Updated 2017-07-11 · CVE-2005-3209

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aeNovo products (affected versions not specified)

Description The issue concerns the storage of password information in plaintext within certain tables of aeNovo products, including aeNovo, aeNovoShop, and aeNovoWYSI. Specifically, the control, content, and page tables contain plaintext passwords. This allows attackers who have access to the database to obtain these passwords and potentially gain privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-3209

Affected Products

Aenovo

Aenovoshop

Aenovowysi

References · 6

• 🔥 http://kapda.ir/advisory-78.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3209 · Security Note
• http://secunia.com/advisories/17117 · Vendor Advisory
• http://osvdb.org/19939 · Note
• http://marc.info/?l=bugtraq&m=112872593432359&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 · Note