CVE-2006-4615 Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information...
MediumCVSS 4.9
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| shape services im+ mobile instant messenger | = 3.10_for_pocket_pc | No fix listed |
References
- airscanner.com exploit vendor-advisory
- 1518 third-party-advisory
- 20060903 Airscanner Mobile Security Advisory #05081701: IM+ v3.10 Local Password Plaintext Exposure mailing-list