CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
76.1%
The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Vendor | Product | Version | CPE |
---|---|---|---|
gplhost | domain_technologie_control | * | cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.24.6 | cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.1 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.7 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.8 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.9 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.27.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.28.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:* |
bugs.debian.org/cgi-bin/bugreport.cgi?bug=614302
git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=adffff7efb3687ff465ee0552a944dd3109f3cb0
git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=f8e3b2d7cc2da313addc05394568ab9599499285
openwall.com/lists/oss-security/2011/02/22/1
packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog
packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog
secunia.com/advisories/43523
www.debian.org/security/2011/dsa-2179
www.gplhost.sg/lists/dtcannounce/msg00025.html
www.vupen.com/english/advisories/2011/0556
exchange.xforce.ibmcloud.com/vulnerabilities/65898