ActivCard Gold Cached Static Password Vulnerability
BID:7340
Info
ActivCard Gold Cached Static Password Vulnerability
| Bugtraq ID: | 7340 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 14 2003 12:00AM |
| Updated: | Apr 14 2003 12:00AM |
| Credit: | Discovery of this issue is credited to OTERO Hernan Gustavo EDS <[email protected]>. |
| Vulnerable: |
ActivCard ActivCard Gold 2.2 ActivCard ActivCard Gold 1.21 |
| Not Vulnerable: | |
Discussion
ActivCard Gold Cached Static Password Vulnerability
ActivCard Gold is reported to cache static passwords in memory. This information may be exposed in memory dumps, allowing a malicious user to gain access to credentials.
ActivCard Gold is reported to cache static passwords in memory. This information may be exposed in memory dumps, allowing a malicious user to gain access to credentials.
Exploit / POC
ActivCard Gold Cached Static Password Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
ActivCard Gold Cached Static Password Vulnerability
Solution:
It is reported that the vendor is working on a solution to limit exploitation of this issue.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that the vendor is working on a solution to limit exploitation of this issue.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ActivCard Gold Cached Static Password Vulnerability
References:
References:
- ActivCard Gold Product Page (ActivCard)
- ActivCard password cache memory leakage (OTERO Hernan Gustavo EDS