Vulnerability CVE-2008-7255
Published: 2010-04-20   Modified: 2012-02-12

Description:
login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.

Type:

CWE-255

 (Credentials Management)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
AMSN -> AMSN 

 References:
http://www.amsn-project.net/forums/index.php?topic=5317.0
http://sourceforge.net/project/shownotes.php?release_id=610067
http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960&r2=10259&pathrev=10259
Copyright 2024, cxsecurity.com

 

Back to Top