NVD

Id
63369  
Name
CVE-2006-4745  
Description
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-13  
Modified Date
2008-09-05  
Seq
2006-4745  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330222 63369 CVE-2006-4745 http://airscanner.com/security/06062602_pocketexpensepro.htm  View
330223 63369 CVE-2006-4745 1559  View
330224 63369 CVE-2006-4745 20060907 Airscanner Mobile Security Advisory #06260602: Pocket Expense Pro 3.9.1 Authentication Bypass  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60890 JVNDB-2006-003156 ScaryBear PocketExpense Pro における認証を無効にされる脆弱性 ScaryBear PocketExpense Pro は、内部で記録された鍵を使用して、平文で格納されたデータファイルのコンテンツを保護するため、認証を無効にされる、およびファイルへアクセスされる脆弱性が存在します。 CVE-2006-4745 20847 CVE-2006-4745 63369 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003156.html 2006-09-13 2012-12-20 View