漏洞信息详情
Positive Software H-Sphere Winbox敏感Logfile内容泄露漏洞
- CNNVD编号:CNNVD-200505-1058
- 危害等级: 中危
- CVE编号:
CVE-2005-1606
- 漏洞类型:
设计错误
- 发布时间:
2005-05-16
- 威胁类型:
本地
- 更新时间:
2005-10-20
- 厂 商:
positive_software - 漏洞来源:
disclosed this vulnerability..’);”>”Morning Wood”
-
漏洞简介
H-Sphere Winbox 2.4.2及2.4.3 RC1在全域可读的日志文件中以纯文本形式储存敏感信息,如用户名和密码,本地用户可借此获取权限。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Positive Software H-Sphere Winbox 2.4.2
H-Sphere Security Update 1 For H-Sphere 2.4.2 Patch 4 and 2.4.3 RC 1
http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html
Positive Software H-Sphere Winbox 2.4.3
H-Sphere Security Update 1 For H-Sphere 2.4.2 Patch 4 and 2.4.3 RC 1
http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html
参考网址
来源: XF
名称: hsphere-information-disclosure(20522)
链接:http://xforce.iss.net/xforce/xfdb/20522
来源: BID
名称: 13559
链接:http://www.securityfocus.com/bid/13559
来源: www.psoft.net
链接:http://www.psoft.net/misc/hsphere_winbox_security_update_passwd.html
来源: SECUNIA
名称: 15287
链接:http://secunia.com/advisories/15287
来源: MISC
链接:http://exploitlabs.com/files/advisories/EXPL-A-2005-007-hsphere.txt
来源: OSVDB
名称: 16239