Vulnerability in Cerulean Studios Trillian Pro

CVE-2005-2444

Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.

EPSS: 0.003 (25.7th percentile) — read the EPSS interpretation.

Affected products

Cerulean_studios Trillian_pro — versions 3.1_build_121
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)