CVE-2002-1676 BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI....
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bindview netinventory | = 1.0 | No fix listed |
| bindview netrc | = 1.0 | No fix listed |
References
- 20020124 BindView NetInventory NetRC hostcfg_ni password passed in clear t ext mailing-list
- 20020213 RE: BindView NetInventory NetRC hostcfg_ni password passed in cle ar text mailing-list
- 3957 patch vdb-entry
- bindview-netinventory-plaintext-password(7992) vdb-entry