Krusader Bookmark Manager Password Information Disclosure Vulnerability

Bugtraq ID:	19194
Class:	Configuration Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 27 2006 12:00AM
Updated:	Jul 28 2006 06:12PM
Credit:	The vulnerability has been disclosed by the vendor.
Vulnerable:	Krusader Krusader 1.70
Not Vulnerable:	Krusader Krusader 1.70.1

Krusader Bookmark Manager Password Information Disclosure Vulnerability

Krusader Bookmark Manager is prone to a local information-disclosure vulnerability because it fails to protect sensitive information from unprivileged users.

An attacker can exploit this issue and gain access to FTP and SMB accounts; other attacks are also possible.

1.70.0 and prior versions are vulnerable to this issue.

Krusader Bookmark Manager Password Information Disclosure Vulnerability

An exploit is not required.

Krusader Bookmark Manager Password Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Krusader Bookmark Manager Password Information Disclosure Vulnerability

References:

• Krusader Home Page (Krusader )