critical9.8
CVE-2010-3845
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log.
Impact
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache Authenhook Project | Apache Authenhook | Version 2.00-04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2010/q4/63
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599712
- https://rt.cpan.org/Public/Bug/Display.html?id=62040
- http://seclists.org/oss-sec/2010/q4/63
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599712
- https://rt.cpan.org/Public/Bug/Display.html?id=62040