NVD

Id
2896  
Name
CVE-2008-3003  
Description
Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:N)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2011-03-07  
Seq
2008-3003  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18332 2896 CVE-2008-3003 SSRT080117  View
18333 2896 CVE-2008-3003 oval:org.mitre.oval:def:5951  View
18334 2896 CVE-2008-3003 MS08-043  View
18335 2896 CVE-2008-3003 30641  View
18336 2896 CVE-2008-3003 1020669  View
18337 2896 CVE-2008-3003 TA08-225A  View
18338 2896 CVE-2008-3003 ADV-2008-2347  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46327 JVNDB-2008-001637 Microsoft Office Excel におけるパスワードを適切に削除しない脆弱性 Microsoft Office Excel には、.xlsx ファイルのリモートデータセッションパスワードを保存しない設定の場合、connections.xml から PWD (パスワード) 文字列を適切に削除しない脆弱性が存在します。 CVE-2008-3003 33116 CVE-2008-3003 2896 6.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001637.html 2008-08-12 2008-09-09 View