medium4.6Public exploit code
CVE-2005-0823
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to ga…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iPool 1.6.81 - Local Password Disclosure2005-03-16 · local · windows · Verified
- iSnooker 1.6.8 - Local Password Disclosure2005-03-16 · local · windows · Verified
Impact
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thepoolclub | Ipool | through 1.6.81 |
| Thepoolclub | Isnooker | through 1.6.8 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14629
- http://securitytracker.com/id?1013458
- http://securitytracker.com/id?1013459
- http://www.securityfocus.com/bid/12830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19718
- http://secunia.com/advisories/14629
- http://securitytracker.com/id?1013458
- http://securitytracker.com/id?1013459
- http://www.securityfocus.com/bid/12830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19718