CVE-2005-1606 | BDVDB-2026-10269 Detail

Description#

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/13559
http://www.osvdb.org/16239
https://exchange.xforce.ibmcloud.com/vulnerabilities/20522
http://secunia.com/advisories/15287
http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt
http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html

Exploit#

No public exploit known

History#

Version 12005-05-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.