NetSight
low2.1

CVE-2005-2962

The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the userna…

Impact

The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.

Affected products

VendorProductAffected versions
NtlmapsNtlmaps
through 0.9.9

References