Vulnerability Details CVE-2006-3816
Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 69.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://groups.google.com/group/krusader-news/browse_thread/thread/ec719041ed4a1a14
- http://krusader.sourceforge.net/phpBB/viewtopic.php?p=7965
- http://www.securityfocus.com/bid/19194
- http://www.vupen.com/english/advisories/2006/2992
- http://groups.google.com/group/krusader-news/browse_thread/thread/ec719041ed4a1a14
- http://krusader.sourceforge.net/phpBB/viewtopic.php?p=7965
- http://www.securityfocus.com/bid/19194
- http://www.vupen.com/english/advisories/2006/2992
Products affected by CVE-2006-3816
-
cpe:2.3:a:krusader:krusader:1.50_beta1
-
cpe:2.3:a:krusader:krusader:1.60.0
-
cpe:2.3:a:krusader:krusader:1.70.0
-
cpe:2.3:a:krusader:krusader:1.70.0_beta1