medium4.6
CVE-2004-2049
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper lib…
Impact
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Esesix | Thintune Extreme | Version 2.4.38 |
| Esesix | Thintune L | Version 2.4.38 |
| Esesix | Thintune M | Version 2.4.38 |
| Esesix | Thintune Mobile | Version 2.4.38 |
| Esesix | Thintune S | Version 2.4.38 |
| Esesix | Thintune Xm | Version 2.4.38 |
| Esesix | Thintune Xs | Version 2.4.38 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109068491801021&w=2
- http://secunia.com/advisories/12154
- http://securitytracker.com/id?1010770
- http://www.osvdb.org/8247
- http://www.securityfocus.com/bid/10794
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16795
- http://marc.info/?l=bugtraq&m=109068491801021&w=2
- http://secunia.com/advisories/12154
- http://securitytracker.com/id?1010770
- http://www.osvdb.org/8247
- http://www.securityfocus.com/bid/10794
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16795