Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-4114
security
vulnerability
nagstamont
cve-2013-4114
network sniffing
cleartext base64 format
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
Node
henri_wahlnagstamonRange≤0.9.9
ORhenri_wahlnagstamonMatch0.5.2
ORhenri_wahlnagstamonMatch0.5.3
ORhenri_wahlnagstamonMatch0.5.4
ORhenri_wahlnagstamonMatch0.5.5
ORhenri_wahlnagstamonMatch0.5.6
ORhenri_wahlnagstamonMatch0.5.7
ORhenri_wahlnagstamonMatch0.5.8
ORhenri_wahlnagstamonMatch0.5.9
ORhenri_wahlnagstamonMatch0.5.10
ORhenri_wahlnagstamonMatch0.5.11
ORhenri_wahlnagstamonMatch0.5.13
ORhenri_wahlnagstamonMatch0.6
ORhenri_wahlnagstamonMatch0.6.1
ORhenri_wahlnagstamonMatch0.6.2
ORhenri_wahlnagstamonMatch0.7.0
ORhenri_wahlnagstamonMatch0.8.0
ORhenri_wahlnagstamonMatch0.8.1
ORhenri_wahlnagstamonMatch0.8.2
ORhenri_wahlnagstamonMatch0.9.0
ORhenri_wahlnagstamonMatch0.9.1
ORhenri_wahlnagstamonMatch0.9.2
ORhenri_wahlnagstamonMatch0.9.3
ORhenri_wahlnagstamonMatch0.9.4
ORhenri_wahlnagstamonMatch0.9.5
ORhenri_wahlnagstamonMatch0.9.6
ORhenri_wahlnagstamonMatch0.9.6.1
ORhenri_wahlnagstamonMatch0.9.7
ORhenri_wahlnagstamonMatch0.9.7.1
ORhenri_wahlnagstamonMatch0.9.8
Related
nessus
nessus
openSUSE Security Update : nagstamon (openSUSE-SU-2013:1235-1)
2014-06-13 00:00:00
Fedora 18 : nagstamon-0.9.9-9.fc18 (2013-12541)
2013-07-16 00:00:00
GLSA-201401-03 : Nagstamon: Information disclosure
2014-01-07 00:00:00
gentoo
gentoo
Nagstamon: Information disclosure
2014-01-06 00:00:00
openvas
openvas
Fedora Update for nagstamon FEDORA-2013-12541
2013-07-16 00:00:00
Mageia: Security Advisory (MGASA-2013-0262)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201401-03
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nagstamon-0.9.9-9.fc18
2013-07-16 01:40:46
[SECURITY] Fedora 19 Update: nagstamon-0.9.9-9.fc19
2013-07-16 01:38:20
nvd
nvd
CVE-2013-4114
2013-08-16 17:55:05
debiancve
debiancve
CVE-2013-4114
2022-10-03 16:14:56
prion
prion
Format string
2013-08-16 17:55:00
mageia
mageia
Updated nagstamon package fixes security vulnerability
2013-08-30 21:19:33
cvelist
cvelist
CVE-2013-4114
2022-10-03 16:14:56
ubuntucve
ubuntucve
CVE-2013-4114
2013-08-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
Related for CVE-2013-4114