CVEvulnerability
CVE-2005-3209
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Affected configurations
• aenovo aenovo
• aenovo aenovoshop
• aenovo aenovowysi
References
- http://marc.info/?l=bugtraq&m=112872593432359&w=2 marc.info
- http://secunia.com/advisories/17117/ Vendor Advisory
- http://www.kapda.ir/advisory-78.html Exploit, Vendor Advisory
- http://www.osvdb.org/19939 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=112872593432359&w=2 marc.info
- http://secunia.com/advisories/17117/ Vendor Advisory
- http://www.kapda.ir/advisory-78.html Exploit, Vendor Advisory
- http://www.osvdb.org/19939 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 exchange.xforce.ibmcloud.com