CVEvulnerability
CVE-2008-7255
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.
Affected configurations
• amsn amsn (<= 0.97)
• amsn amsn 0.83
• amsn amsn 0.90
• amsn amsn 0.91
• amsn amsn 0.92
• amsn amsn 0.93
• amsn amsn 0.94
• amsn amsn 0.95
• amsn amsn 0.96
Related
Weakness · not in database (1)
References
- http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960&r2=10259&pathrev=10259 amsn.svn.sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=610067 sourceforge.net
- http://www.amsn-project.net/forums/index.php?topic=5317.0 www.amsn-project.net
- http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960&r2=10259&pathrev=10259 amsn.svn.sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=610067 sourceforge.net
- http://www.amsn-project.net/forums/index.php?topic=5317.0 www.amsn-project.net