Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0823
thepoolclub
ipool
isnooker
cleartext
mydetails.txt
local users
privileges
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.9%
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
Affected configurations
Node
thepoolclubipoolRange≤1.6.81
ORthepoolclubisnookerRange≤1.6.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| thepoolclub:ipool | thepoolclub ipool | le | 1.6.81 |
| thepoolclub:isnooker | thepoolclub isnooker | le | 1.6.8 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.9%
Related for CVE-2005-0823