Counterpane Password Safe Data Buffer Recovery Vulnerability
BID:3337
Info
Counterpane Password Safe Data Buffer Recovery Vulnerability
| Bugtraq ID: | 3337 |
| Class: | Environment Error |
| CVE: |
CVE-2001-0984 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 13 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | This vulnerability was announced by Valentin Butanescu <[email protected]> via Bugtraq on September 13, 2001. |
| Vulnerable: |
Counterpane Password Safe 1.7.1 |
| Not Vulnerable: | |
Discussion
Counterpane Password Safe Data Buffer Recovery Vulnerability
Counterpane Password Safe is a freely available password storage program designed to securely store usernames and passwords, assessable by one master password, or "combination" to the safe.
A problem in Password Safe makes it possible for local users to gain access to clear text usernames, and potentially passwords. When the program option to clear passwords from the clipboard is enabled, Windows will copy the contents of the clipboard to a buffer prior to minimizing the program.
This makes it possible for a local user to gain access to usernames, and potentially passwords.
Counterpane Password Safe is a freely available password storage program designed to securely store usernames and passwords, assessable by one master password, or "combination" to the safe.
A problem in Password Safe makes it possible for local users to gain access to clear text usernames, and potentially passwords. When the program option to clear passwords from the clipboard is enabled, Windows will copy the contents of the clipboard to a buffer prior to minimizing the program.
This makes it possible for a local user to gain access to usernames, and potentially passwords.
Exploit / POC
Counterpane Password Safe Data Buffer Recovery Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Counterpane Password Safe Data Buffer Recovery Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Counterpane Password Safe Data Buffer Recovery Vulnerability
References:
References: