CVE-2005-3856

The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:krusader:krusader:1.60.0:*:*:*:*:*:*:*
cpe:2.3:a:krusader:krusader:1.70.0_beta1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:02

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 - Patch, Vendor Advisory () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 - Patch, Vendor Advisory
References () http://www.krusader.org/phpBB/viewtopic.php?t=1367 - Vendor Advisory () http://www.krusader.org/phpBB/viewtopic.php?t=1367 - Vendor Advisory
References () http://www.krusader.org/phpBB/viewtopic.php?t=1368 - Patch () http://www.krusader.org/phpBB/viewtopic.php?t=1368 - Patch

Information

Published : 2005-11-27 20:03

Updated : 2025-04-03 01:03


NVD link : CVE-2005-3856

Mitre link : CVE-2005-3856

CVE.ORG link : CVE-2005-3856


JSON object : View

Products Affected

krusader

  • krusader