PT-2007-6745 · Retina X Studios · Mobile Spy

Seth Fogie · Published 2007-11-01 · Updated 2024-02-14 · CVE-2007-5778

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mobile Spy (affected versions not specified)

Description The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login credentials and log data over a cleartext HTTP connection. This allows attackers to obtain sensitive information either by reading the registry or by sniffing the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2007-5778

Affected Products

Mobile Spy

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-5778 · Security Note
• http://securityfocus.com/archive/1/482663/100/0/threaded · Note
• http://securityfocus.com/bid/26177 · Note
• http://securityreason.com/securityalert/3333 · Note
• http://osvdb.org/43625 · Note
• http://airscanner.com/security/07101401_mobilespy.htm · Note
• http://informit.com/articles/article.aspx?p=1077909 · Note
• http://osvdb.org/43626 · Note