The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
References
| Link | Resource |
|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 | Patch Vendor Advisory |
| http://www.krusader.org/phpBB/viewtopic.php?t=1367 | Vendor Advisory |
| http://www.krusader.org/phpBB/viewtopic.php?t=1368 | Patch |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 | Patch Vendor Advisory |
| http://www.krusader.org/phpBB/viewtopic.php?t=1367 | Vendor Advisory |
| http://www.krusader.org/phpBB/viewtopic.php?t=1368 | Patch |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 - Patch, Vendor Advisory | |
| References | () http://www.krusader.org/phpBB/viewtopic.php?t=1367 - Vendor Advisory | |
| References | () http://www.krusader.org/phpBB/viewtopic.php?t=1368 - Patch |
Information
Published : 2005-11-27 20:03
Updated : 2025-04-03 01:03
NVD link : CVE-2005-3856
Mitre link : CVE-2005-3856
CVE.ORG link : CVE-2005-3856
JSON object : View
Products Affected
krusader
- krusader
CWE
