OSVDB ID: 16046 Title: Cocktail Process List Administrator Password Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Cocktail contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to plaintext passwords when cocktail passes the password in cleartext while executing functions, which may lead to a loss of confidentiality. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version 3.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
hushmail.com -