Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0436
HistoryMar 07, 2011 - 12:00 a.m.

CVE-2011-0436

2011-03-0700:00:00
ubuntu.com
ubuntu.com
10

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.1%

The register_user function in client/new_account_form.php in Domain
Technologie Control (DTC) before 0.32.9 includes a cleartext password in an
e-mail message, which makes it easier for remote attackers to obtain
sensitive information by sniffing the network.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchdtc< 0.25.3-2ubuntu1.1UNKNOWN
ubuntu9.10noarchdtc< 0.29.17-1+lenny1build0.9.10.1UNKNOWN
ubuntu10.04noarchdtc< 0.30.10-1ubuntu1UNKNOWN
ubuntu10.10noarchdtc< 0.30.18-1ubuntu1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.1%