PT-2010-1590 · Tukeva · Tukeva Password Reminder

Iqlusion · CVE-2009-4781 · Published 2010-04-21 · Updated 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TUKEVA Password Reminder version 1.0.0.3 and earlier

Description The issue allows local users to discover credentials due to a hard-coded password for rem.accdb. This can be achieved via a DBI connection.

Recommendations For versions prior to 1.0.0.4, update to version 1.0.0.4 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4781

Affected Products

Tukeva Password Reminder

References · 5

• 🔥 https://exploit-db.com/exploits/10201 · Exploit
• 🔥 http://exploit-db.com/exploits/10201 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4781 · Security Note
• http://secunia.com/advisories/37553 · Vendor Advisory
• http://tekuva.com/index.php?option=com_docman&task=doc_details&gid=40&Itemid=9 · Note