MySQL-GUI-tools CVE-2010-4177 Local Information Disclosure Vulnerability

Bugtraq ID:	97959
Class:	Design Error
CVE:	CVE-2010-4177
Remote:	No
Local:	Yes
Published:	Nov 18 2010 12:00AM
Updated:	May 02 2017 02:08AM
Credit:	Martin Drescher
Vulnerable:	Oracle MySQL-GUI-tools 0
Not Vulnerable:

MySQL-GUI-tools CVE-2010-4177 Local Information Disclosure Vulnerability

MySQL-GUI-tools is prone to a local remote information-disclosure vulnerability.

Local attackers may exploit this issue to obtain sensitive information, such as credentials, that may aid in further attacks.

MySQL-GUI-tools CVE-2010-4177 Local Information Disclosure Vulnerability

Attackers require local interactive access to an affected computer to exploit this issue.

MySQL-GUI-tools CVE-2010-4177 Local Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

MySQL-GUI-tools CVE-2010-4177 Local Information Disclosure Vulnerability

References:

• Bug 655018 CVE-2010-4177 CVE-2010-4178 mysql-gui-tools various flaws (Redhat)
  
• MySQL Home Page (MySQL)
  
• Bug 655015 CVE-2010-4177 mysql-gui-tools (mysql-query-browser): Clear text pass (Redhat)
  
• Clear text password in process list when using MySQL GUI tools (Openwall)