Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=112872593432359&w=2 | |
http://secunia.com/advisories/17117/ | Vendor Advisory |
http://www.kapda.ir/advisory-78.html | Exploit Vendor Advisory |
http://www.osvdb.org/19939 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-10-14 10:02
Updated : 2017-07-11 01:33
NVD link : CVE-2005-3209
Mitre link : CVE-2005-3209
CVE.ORG link : CVE-2005-3209
JSON object : View
Products Affected
aenovo
- aenovo
- aenovowysi
- aenovoshop
CWE