ByteOS Network

NVD Vulnerability Details :

CVE-2009-2312

Modified

Source-cve@mitre.org

Published At-02 Jul, 2009 | 10:30

Updated At-17 Aug, 2017 | 01:30

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

McAfee, LLC

>>smartfilter>>4.2.1.00

cpe:2.3:a:mcafee:smartfilter:4.2.1.00:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-310	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html	cve@mitre.org	N/A
http://secunia.com/advisories/34390	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49338	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History