low1.2Public exploit code
CVE-2006-4676
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decodin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TIBCO Rendezvous 7.4.11 - Password Extractor2006-09-01 · local · windows · Verified
Impact
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Rendezvous | through 7.4.11 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21748
- http://www.securityfocus.com/bid/19883
- http://www.vupen.com/english/advisories/2006/3497
- https://www.exploit-db.com/exploits/2284
- http://secunia.com/advisories/21748
- http://www.securityfocus.com/bid/19883
- http://www.vupen.com/english/advisories/2006/3497
- https://www.exploit-db.com/exploits/2284