CVEvulnerability
CVE-2005-3856
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
Affected configurations
• krusader krusader 1.60.0
• krusader krusader 1.70.0 beta1
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 Patch, Vendor Advisory
- http://www.krusader.org/phpBB/viewtopic.php?t=1367 Vendor Advisory
- http://www.krusader.org/phpBB/viewtopic.php?t=1368 Patch
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169 Patch, Vendor Advisory
- http://www.krusader.org/phpBB/viewtopic.php?t=1367 Vendor Advisory
- http://www.krusader.org/phpBB/viewtopic.php?t=1368 Patch