PT-2006-4541 · Unknown · Passwordsafe

J.R. Wikes · Published 2006-07-28 · Updated 2018-10-18 · CVE-2006-3675

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Password Safe versions 2.11 through 3.0BETA1

Description The issue concerns the password database locking mechanism. When specific dialogue windows are open, the configuration settings for locking the database are not respected. This could allow attackers with physical access to obtain the database contents.

Recommendations For versions 2.11 through 3.0BETA1, consider implementing additional access controls to the password database when dialogue windows are open, such as manually locking the database or restricting physical access to the device.

Exploit

Fix

Related Identifiers

CVE-2006-3675

Affected Products

Passwordsafe

References · 7

• 🔥 http://symantec.com/enterprise/research/SYMSA-2006-008.txt · Exploit
• 🔥 http://securitytracker.com/id?1016565 · Exploit
• 🔥 http://securityfocus.com/bid/19078 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3675 · Security Note
• http://securityfocus.com/archive/1/441040/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27933 · Note
• http://securityreason.com/securityalert/1308 · Note