CVE-2005-3429

Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html	Exploit Patch
http://marc.info/?l=bugtraq&m=113053680631151&w=2
http://securitytracker.com/id?1015117
http://www.osvdb.org/22682
http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22906

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rockliffe:mailsite_express::::::::
	cpe:2.3:a:rockliffe:mailsite_express:6.1.20:::::::*

History

No history.

Information

Published : 2005-11-02 11:02

Updated : 2024-02-28 10:42

NVD link : CVE-2005-3429

Mitre link : CVE-2005-3429

CVE.ORG link : CVE-2005-3429

JSON object : View

Products Affected

rockliffe

mailsite_express

CWE

NVD-CWE-Other

{"id": "CVE-2005-3429", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-11-02T11:02:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=113053680631151&w=2", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1015117", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22682", "source": "cve@mitre.org"}, {"url": "http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22906", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities."}], "lastModified": "2017-07-11T01:33:11.783", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rockliffe:mailsite_express:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF85F655-3BC7-4804-8E00-FAD19B9E6620", "versionEndIncluding": "6.1.21"}, {"criteria": "cpe:2.3:a:rockliffe:mailsite_express:6.1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A63D4D75-76B2-4566-B91E-3FB1AD1BACEA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}