ActivePost Standard Conference Room Password Disclosure

2004-09-23T02:24:47
ID OSVDB:10236
Type osvdb
Reporter Luigi Auriemma(aluigi@altervista.org)
Modified 2004-09-23T02:24:47

Description

Vulnerability Description

ActivePost Standard contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to plaintext passwords including those to protected rooms when a user enters a conference room occurs, which may lead to a loss of confidentiality.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

ActivePost Standard contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to plaintext passwords including those to protected rooms when a user enters a conference room occurs, which may lead to a loss of confidentiality.

References:

Vendor Specific Solution URL: http://www.activepost.net/ Security Tracker: 1011406 Secunia Advisory ID:12642 Related OSVDB ID: 10233 Related OSVDB ID: 10235 Related OSVDB ID: 10234 Other Advisory URL: http://aluigi.altervista.org/adv/actp-adv.txt Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html CVE-2004-1549