CVE-2002-0324 Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg f...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| noah gray graymatter | = 1.1 | No fix listed |
| noah gray graymatter | = 1.1b | No fix listed |
| noah gray graymatter | = 1.2b | No fix listed |
| noah gray graymatter | = 1.21 | No fix listed |
References
- 20020224 Greymatter 1.21c and earlier - remote login/pass exposure mailing-list
- www.dangerousmonkey.com exploit vendor-advisory
- greymatter-gmrightclick-account-information(8277) exploit vdb-entry vendor-advisory
- 4169 vdb-entry