CVE

Id
20746  
CVE No.
CVE-2006-4642  
Status
Candidate  
Description
AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196078 20746 CVE-2006-4642 BUGTRAQ:20060905 AuditWizard 6.3.2 gives away administrator password  View
196079 20746 CVE-2006-4642 URL:http://www.securityfocus.com/archive/1/archive/1/445220/100/0/threaded  View
196080 20746 CVE-2006-4642 BID:19860  View
196081 20746 CVE-2006-4642 URL:http://www.securityfocus.com/bid/19860  View
196082 20746 CVE-2006-4642 VUPEN:ADV-2006-3498  View
196083 20746 CVE-2006-4642 URL:http://www.vupen.com/english/advisories/2006/3498  View
196084 20746 CVE-2006-4642 SECTRACK:1016795  View
196085 20746 CVE-2006-4642 URL:http://securitytracker.com/id?1016795  View
196086 20746 CVE-2006-4642 SECUNIA:21773  View
196087 20746 CVE-2006-4642 URL:http://secunia.com/advisories/21773  View
196088 20746 CVE-2006-4642 SREASON:1525  View
196089 20746 CVE-2006-4642 URL:http://securityreason.com/securityalert/1525  View
196090 20746 CVE-2006-4642 XF:auditwizard-remoteaudit-password-disclosure(28743)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60866 JVNDB-2006-003132 phpFullAnnu の modules/home.module.php における PHP リモートファイルインクルージョンの脆弱性 phpFullAnnu の modules/home.module.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4644 20746 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003132.html  View