CVE-2011-0436

CVE-2011-0436 affects Domain Technologie Control (DTC) prior to 0.32.9. The register_user flow in client/new_account_form.php sends the new account password in plaintext via email, enabling password exposure if network traffic is sniffed. Public sources (NVD/OpenVAS/DSA references) confirm this i...

[SECURITY] [DSA 2179-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2179-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...