CVE

Id
49412  
CVE No.
CVE-2011-1500  
Status
Candidate  
Description
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user"s home directory, which allows local users to obtain Pandora credentials by reading this file.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536368 49412 CVE-2011-1500 MLIST:[oss-security] 20110408 CVE request for pithos information disclosure  View
536369 49412 CVE-2011-1500 URL:http://openwall.com/lists/oss-security/2011/04/08/2  View
536370 49412 CVE-2011-1500 MLIST:[oss-security] 20110408 Re: CVE request for pithos information disclosure  View
536371 49412 CVE-2011-1500 URL:http://openwall.com/lists/oss-security/2011/04/08/4  View
536372 49412 CVE-2011-1500 CONFIRM:https://bugs.launchpad.net/pithos/+bug/733307  View
536373 49412 CVE-2011-1500 BID:47300  View
536374 49412 CVE-2011-1500 URL:http://www.securityfocus.com/bid/47300  View
536375 49412 CVE-2011-1500 SECUNIA:44059  View
536376 49412 CVE-2011-1500 URL:http://secunia.com/advisories/44059  View
536377 49412 CVE-2011-1500 XF:pithos-pithos-info-disclosure(66661)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34168 JVNDB-2011-004410 IBM Lotus Quickr services for Lotus Domino における詳細不明な脆弱性 IBM Lotus Quickr services for Lotus Domino には詳細不明な脆弱性が存在します。 CVE-2011-1505 49412 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004410.html  View