CVE-2005-3856 The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL fie...
MediumCVSS 4.0
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| krusader | = 1.60.0 | No fix listed |
| krusader | = 1.70.0_beta1 | No fix listed |
| debian/krusader(Debian:12) | < 1.70.0-1 | 1.70.0-1 |
| debian/krusader(Debian:13) | < 1.70.0-1 | 1.70.0-1 |
| debian/krusader(Debian:14) | < 1.70.0-1 | 1.70.0-1 |
References
- bugs.debian.org patch vendor-advisory
- www.krusader.org vendor-advisory
- www.krusader.org patch
- Debian Security Tracker CVE-2005-3856 vendor-advisory
- bugs.debian.org issue-tracking