Vulnerability in Positive Software H-Sphere Winbox
CVE-2005-1606
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.
EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.
Affected products
- Positive_software H-sphere_winbox — versions 2.4.2_patch_4, 2.4.3_rc1
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Exploit, Patch, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch)