CVE

Id
33264  
CVE No.
CVE-2008-3147  
Status
Candidate  
Description
WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%WeFiUsers, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.  
Phase
Assigned (20080711)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362150 33264 CVE-2008-3147 BUGTRAQ:20080704 Local vulnerability in WeFi Client v3.2.1.4.1(Update)  View
362151 33264 CVE-2008-3147 URL:http://www.securityfocus.com/archive/1/archive/1/493946/100/0/threaded  View
362152 33264 CVE-2008-3147 BUGTRAQ:20080708 Re: Local vulnerability in WeFi Client v3.2.1.4.1(Update)  View
362153 33264 CVE-2008-3147 URL:http://www.securityfocus.com/archive/1/archive/1/494026/100/0/threaded  View
362154 33264 CVE-2008-3147 BID:30088  View
362155 33264 CVE-2008-3147 URL:http://www.securityfocus.com/bid/30088  View
362156 33264 CVE-2008-3147 OSVDB:51543  View
362157 33264 CVE-2008-3147 URL:http://osvdb.org/51543  View
362158 33264 CVE-2008-3147 SECUNIA:30966  View
362159 33264 CVE-2008-3147 URL:http://secunia.com/advisories/30966  View
362160 33264 CVE-2008-3147 SREASON:3987  View
362161 33264 CVE-2008-3147 URL:http://securityreason.com/securityalert/3987  View
362162 33264 CVE-2008-3147 XF:wefi-clientwefilog-info-disclosure(43621)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50700 JVNDB-2008-006010 PHP-Nuke 用の 4ndvddb モジュールにおける SQL インジェクションの脆弱性 PHP-Nuke 用の 4ndvddb モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2008-3151 33264 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006010.html  View