Lucene search

K
cveMitreCVE-2005-0823
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0823

2005-05-0204:00:00
mitre
web.nvd.nist.gov
23
thepoolclub
ipool
isnooker
cleartext
mydetails.txt
local users
privileges
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0

Percentile

15.8%

ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.

Affected configurations

Nvd
Node
thepoolclubipoolRange1.6.81
OR
thepoolclubisnookerRange1.6.8
VendorProductVersionCPE
thepoolclubipool*cpe:2.3:a:thepoolclub:ipool:*:*:*:*:*:*:*:*
thepoolclubisnooker*cpe:2.3:a:thepoolclub:isnooker:*:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0

Percentile

15.8%

Related for CVE-2005-0823