OSVDB ID: 18440

Title: Trillian Pro Yahoo Mail Account Cleartext Password Local Disclosure

Info

Disclosure
Jul 29, 2005

Discovery
Jul 29, 2005

Dates

Exploit
Jul 29, 2005

Solution
Unknown

Description

 Trillian contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to Yahoo Mail passwords when the Check Mail function occurs, which may lead to a loss of confidentiality.

Classification

 Location: Local Access Required
Attack Type: Cryptographic, Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Cerulean Studios

Trillian Basic

 3.1

Trillian Pro

 3.1

References

Credit
  • Suramya Tomar - securityBrand New Doo Doosuramya.com -


Direct URL: http://osvdb.org/36218