Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.
References
Configurations
History
21 Nov 2024, 00:00
Type | Values Removed | Values Added |
---|---|---|
References | () http://antilamo.skifstone.com/vuln/whisper32.txt - Vendor Advisory | |
References | () http://marc.info/?l=bugtraq&m=112438834310990&w=2 - | |
References | () http://securitytracker.com/id?1014730 - | |
References | () http://www.securityfocus.com/bid/14600 - |
Information
Published : 2005-08-23 04:00
Updated : 2024-11-21 00:00
NVD link : CVE-2005-2664
Mitre link : CVE-2005-2664
CVE.ORG link : CVE-2005-2664
JSON object : View
Products Affected
whisper32
- whisper32
CWE