CVE-2008-1970

muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.

Link	Resource
http://www.mucommander.com/changes.php
http://secunia.com/advisories/29893	Vendor Advisory
http://www.securityfocus.com/bid/28875
https://exchange.xforce.ibmcloud.com/vulnerabilities/41908

Configuration 1

cpe:2.3:a:mucommander:mucommander:0.6:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.8:beta3:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.5:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.3:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.2:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.1:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.8:beta2:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.8:beta1:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.7:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:0.4:*:*:*:*:*:*:* cpe:2.3:a:mucommander:mucommander:*:*:*:*:*:*:*:*

---

Published : 2008-04-27 06:05

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1970

Mitre link : CVE-2008-1970

No products.

CWE-255