CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.

🔗 References (6)

• cve@mitrehttp://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
• cve@mitrehttp://secunia.com/advisories/34390
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/49338
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34390
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/49338