CVE-2012-3887

{"id": "CVE-2012-3887", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-26T22:55:01.887", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an \"Encrypted Transmission\" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI."}, {"lang": "es", "value": "AirDroid antes de v1.0.7 beta utiliza texto en claro en base64 para una transferencia de datos que se documenta como una \"transmisi\u00f3n codificada\", la cual permite a atacantes remotos obtener informaci\u00f3n sensible espiando el tr\u00e1fico de redes inal\u00e1mbricas locales, tal y como se demuestra con mensajes SMS enviados a la URI sdctl/SMS/send/single/."}], "lastModified": "2012-07-27T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:airdroid:airdroid:*:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C53EA9EB-E553-4117-A94E-697749684D77", "versionEndIncluding": "1.0.6"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "249BB79C-3515-45C0-9F8F-117A2C9C6DEE"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35B973F7-5FE8-4B7D-8FD3-752720E99DEB"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "829BFFB7-3B09-4823-89DA-FDB0546F579C"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E80F41B-56A7-440D-AACF-895F51EBE04E"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18DA093A-2C50-4D62-A65B-CDB061CCA01D"}, {"criteria": "cpe:2.3:a:airdroid:airdroid:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7155A119-5C2D-4B78-8F40-D52A73F3EF37"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}