PT-2005-4225 · Rockliffe · Rockliffe Mailsite Express

Paul Craig · Published 2005-11-02 · Updated 2017-07-11 · CVE-2005-3429

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rockliffe MailSite Express versions prior to 6.1.22

Description The issue allows local users to obtain passwords by reading the cookie file or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities, because it saves user passwords in plaintext in cookies when the option to save login information is enabled.

Recommendations For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue. As a temporary workaround, consider disabling the option to save login information to prevent passwords from being saved in plaintext in cookies. Restrict access to the cookie file to minimize the risk of local users obtaining passwords. Avoid using the password variable in cookie files until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-3429

Affected Products

Rockliffe Mailsite Express

References · 8

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html · Exploit
• 🔥 http://security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3429 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22906 · Note
• http://osvdb.org/22682 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3429 · Note
• http://securitytracker.com/id?1015117 · Note
• http://marc.info/?l=bugtraq&m=113053680631151&w=2 · Note