Lucene search
HistoryJan 31, 2007 - 6:28 p.m.
CVE-2007-0627
cve-2007-0627
michael still
gtalkbot
security vulnerability
sensitive information
command line arguments
local users
6.2 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| michael_still:gtalkbot | michael still gtalkbot | le | 1.1 |
References
Related
prion
prion
Default credentials
2007-01-31 18:28:00
securityvulns
securityvulns
gtalkbot information leak
2007-02-01 00:00:00
6.2 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2007-0627