Vulnerabilities > CVE-2010-0616 - Credentials Management vulnerability in Myshell Evalsmsi 2.1.03
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
References
- http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt
- http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt
- http://secunia.com/advisories/38478
- http://secunia.com/advisories/38478
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
- http://www.osvdb.org/62180
- http://www.osvdb.org/62180
- http://www.securityfocus.com/archive/1/509370/100/0/threaded
- http://www.securityfocus.com/archive/1/509370/100/0/threaded
- http://www.securityfocus.com/bid/38116
- http://www.securityfocus.com/bid/38116