Proxytunnel Local Proxy Credential Disclosure Vulnerability
BID:11299
Info
Proxytunnel Local Proxy Credential Disclosure Vulnerability
| Bugtraq ID: | 11299 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 01 2004 12:00AM |
| Updated: | Oct 01 2004 12:00AM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
proxytunnel proxytunnel 1.1.3 proxytunnel proxytunnel 1.0.6 |
| Not Vulnerable: |
proxytunnel proxytunnel 1.2 .0 |
Discussion
Proxytunnel Local Proxy Credential Disclosure Vulnerability
A vulnerability exists in proxytunnel that has the potential to expose proxy credentials to other local users. Reportedly proxyuser/proxypass data is not passed to the program in a secure manner, potentially exposing this data to other users on the computer.
A vulnerability exists in proxytunnel that has the potential to expose proxy credentials to other local users. Reportedly proxyuser/proxypass data is not passed to the program in a secure manner, potentially exposing this data to other users on the computer.
Exploit / POC
Proxytunnel Local Proxy Credential Disclosure Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Proxytunnel Local Proxy Credential Disclosure Vulnerability
Solution:
This issue has been addressed in proxytunnel 1.2.0.
proxytunnel proxytunnel 1.0.6
proxytunnel proxytunnel 1.1.3
Solution:
This issue has been addressed in proxytunnel 1.2.0.
proxytunnel proxytunnel 1.0.6
-
proxytunnel proxytunnel 1.2.0
http://prdownloads.sourceforge.net/proxytunnel/proxytunnel-1.2.0.tgz?d ownload
proxytunnel proxytunnel 1.1.3
-
proxytunnel proxytunnel 1.2.0
http://prdownloads.sourceforge.net/proxytunnel/proxytunnel-1.2.0.tgz?d ownload
References
Proxytunnel Local Proxy Credential Disclosure Vulnerability
References:
References:
- proxytunnel 1.2.0 Changes (proxytunnel)
- proxytunnel Homepage (proxytunnel)