CVE-2003-1439 Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
MediumCVSS 4.3
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| silc secure internet live conferencing | = 0.9.11 | No fix listed |
| silc secure internet live conferencing | = 0.9.12 | No fix listed |
References
- 20030201 silc question - insecure memory exploit mailing-list
- 20030201 Re: silc question - insecure memory mailing-list
- 6743 vdb-entry
- silc-plaintext-account-information(11244) vdb-entry