SecurityTeam US - ICUII Disclosure of Passwords


	Contribute : Advanced Search : Web Resources : Polls : File Repository

Poll
What would you like to see on SecurityTeamUS? More News Product Reviews HowTo's Custom RPM/Packages/Tools Other (Please leave comment) Results 96 votes \| 0 comments

Topics
Home Apache Apple Application Software Cisco Systems Database Servers Internet Explorer Linux Macromedia Microsoft Mozilla/Firefox Phishing/ID Theft Real Networks Security News Sun Microsystems Web Appliances/Devices Web Scripts Wi-Fi

Virus Alerts
17 Apr 2011 Troj/Mdrop-DKE 17 Apr 2011 Troj/Sasfis-O 17 Apr 2011 Troj/Keygen-FU 17 Apr 2011 Troj/Zbot-AOY 17 Apr 2011 Troj/Zbot-AOW 17 Apr 2011 W32/Womble-E 17 Apr 2011 Troj/VB-FGD 17 Apr 2011 Troj/FakeAV-DFF 17 Apr 2011 Troj/SWFLdr-W 17 Apr 2011 W32/RorpiaMem-A

Events
There are no upcoming events

Welcome to SecurityTeam US
Monday, February 06 2012 @ 12:08 PM EST

ICUII Disclosure of Passwords

Thursday, May 05 2005 @ 09:08 AM EDT

Kozan has discovered a security issue in ICUII, which can be exploited by malicious, local users to disclose sensitive information.

The problem is that passwords are stored in plain text in the world-readable file "icuii.ini".

The security issue has been confirmed in version 7.0.0. Other versions may also be affected.

SOFTWARE:
ICUII 7.x

SOLUTION:
Grant only trusted users access to affected systems.

VERIFY ADVISORY:
http://secunia.com/advisories/15171/

Secunia Security Advisories

What's Related
http://secunia.com/advi... More from Application Software

Story Options
Mail Story to a Friend Printable Story Format

ICUII Disclosure of Passwords | 0 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Dedicated Servers
Created this page in 0.15 seconds