PT-2013-4905 · Intel · Intel Wimax Network Service

Florian Weimer · Published 2013-08-25 · Updated 2013-08-26 · CVE-2013-4217

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2

Description The issue allows local users to obtain sensitive information by reading a log file due to the logging of a cleartext password during certain attempts to set a password by the OSAL Crypt SetEncryptedPassword function.

Recommendations For Intel WiMAX Network Service versions through 1.5.2, consider restricting access to log files to minimize the risk of exploitation until a patch is available.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-4217

Affected Products

Intel Wimax Network Service

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4217 · Security Note
• http://openwall.com/lists/oss-security/2013/08/08/17 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=911121 · Note