PT-2007-1233 · Globetrotter · Globetrotter Mobility Manager

Published 2007-01-29 · Updated 2018-10-16 · CVE-2006-6953

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: GlobeTrotter Mobility Manager (affected versions not specified)

Description: The issue concerns the virtual keyboard implementation, which changes the color of a key as it is pressed. This allows local users to capture arbitrary keystrokes, such as passwords, through methods like shoulder surfing or by grabbing periodic screenshots.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2006-6953

Affected Products

Globetrotter Mobility Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6953 · Security Note
• http://img45.imageshack.us/my.php?image=poc7ik.jpg · Note
• http://securityfocus.com/archive/1/438376/100/100/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27447 · Note