Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-3856HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-3856
2022-10-0316:22:38
Debian Security Bug Tracker
security-tracker.debian.org
11
krusader
popularurls.cpp
cleartext
password
vulnerability
unix
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
40.4%
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | krusader | < 1.70.0-1 | krusader_1.70.0-1_all.deb |
| Debian | 11 | all | krusader | < 1.70.0-1 | krusader_1.70.0-1_all.deb |
| Debian | 999 | all | krusader | < 1.70.0-1 | krusader_1.70.0-1_all.deb |
| Debian | 13 | all | krusader | < 1.70.0-1 | krusader_1.70.0-1_all.deb |
Related
cve
cve
CVE-2005-3856
2022-10-03 16:22:38
cvelist
cvelist
CVE-2005-3856
2022-10-03 16:22:38
ubuntucve
ubuntucve
CVE-2005-3856
2005-11-27 00:00:00
nvd
nvd
CVE-2005-3856
2005-11-27 20:03:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
40.4%
Related for DEBIANCVE:CVE-2005-3856