CVE-2005-2209

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2209
Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

1.9 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/15995 Broken Link
http://securitytracker.com/id?1014409 Broken Link Exploit Third Party Advisory VDB Entry Vendor Advisory
http://secunia.com/advisories/15995 Broken Link
http://securitytracker.com/id?1014409 Broken Link Exploit Third Party Advisory VDB Entry Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:capturix:scanshare:1.06:build_50:*:*:*:*:*:*
History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () http://secunia.com/advisories/15995 - Broken Link () http://secunia.com/advisories/15995 - Broken Link
References () http://securitytracker.com/id?1014409 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory () http://securitytracker.com/id?1014409 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory

13 Feb 2024, 16:09

Type Values Removed Values Added
References (SECUNIA) http://secunia.com/advisories/15995 - (SECUNIA) http://secunia.com/advisories/15995 - Broken Link
References (SECTRACK) http://securitytracker.com/id?1014409 - Exploit, Vendor Advisory (SECTRACK) http://securitytracker.com/id?1014409 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
CWE NVD-CWE-Other CWE-312
CPE cpe:2.3:a:capturix:scanshare:1.06_build_50:*:*:*:*:*:*:* cpe:2.3:a:capturix:scanshare:1.06:build_50:*:*:*:*:*:*
CVSS v2 : 1.9
v3 : unknown 		v2 : 1.9
v3 : 5.5
Information

Published : 2005-07-11 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-2209

Mitre link : CVE-2005-2209

CVE.ORG link : CVE-2005-2209

JSON object : View

Products Affected

capturix

  • scanshare
CWE
CWE-312

Cleartext Storage of Sensitive Information