high7.5
CVE-2005-3414
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
Impact
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eyeos Project | Eyeos | Version 0.8.4 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17105
- http://www.osvdb.org/20411
- http://www.securityfocus.com/bid/15256
- http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf
- http://www.vupen.com/english/advisories/2005/2259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22938
- http://secunia.com/advisories/17105
- http://www.osvdb.org/20411
- http://www.securityfocus.com/bid/15256
- http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf
- http://www.vupen.com/english/advisories/2005/2259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22938