Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
BID:18940
CVE-2006-3663 |Info
Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
| Bugtraq ID: | 18940 |
| Class: | Design Error |
| CVE: |
CVE-2006-3663 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 11 2006 12:00AM |
| Updated: | Jul 25 2006 06:12PM |
| Credit: | finde_schwachstelle has been credited with the discovery of this vulnerability. |
| Vulnerable: |
Finjan Finjan Appliance 5100/8100 NG 8.3.5 |
| Not Vulnerable: |
Finjan Finjan Appliance 5100/8100 NG 8.3.6 0 |
Discussion
Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
Finjan Appliance is prone to a vulnerability that may permit information disclosure.
The problem occurs because the device stores username and password pairs in plain text in backup files. A local authenticated attacker could exploit this issue to retrieve the username and password of other users; this may facilitate the disclosure of sensitive information.
Finjan Appliance is prone to a vulnerability that may permit information disclosure.
The problem occurs because the device stores username and password pairs in plain text in backup files. A local authenticated attacker could exploit this issue to retrieve the username and password of other users; this may facilitate the disclosure of sensitive information.
Exploit / POC
Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
Solution:
The vendor released version 8.3.6 to address this issue. Please contact the vendor for more information.
Solution:
The vendor released version 8.3.6 to address this issue. Please contact the vendor for more information.
References
Finjan Appliance Plaintext Password Storage Information Disclosure Vulnerability
References:
References:
- Finjan Appliance Home Page (Finjan Inc.)