CVE

Id
4716  
CVE No.
CVE-2002-0324  
Status
Candidate  
Description
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.  
Phase
Proposed (20020502)  
Votes
ACCEPT(1) Frech | NOOP(4) Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23642 4716 CVE-2002-0324 BUGTRAQ:20020224 Greymatter 1.21c and earlier - remote login/pass exposure  View
23643 4716 CVE-2002-0324 URL:http://marc.info/?l=bugtraq&m=101465343308249&w=2  View
23644 4716 CVE-2002-0324 MISC:http://www.dangerousmonkey.com/dangblog/dangarch/00000051.htm  View
23645 4716 CVE-2002-0324 XF:greymatter-gmrightclick-account-information(8277)  View
23646 4716 CVE-2002-0324 URL:http://www.iss.net/security_center/static/8277.php  View
23647 4716 CVE-2002-0324 BID:4169  View

Related JVN