ID CVE-2005-4506
Summary Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges.
References
Vulnerable Configurations
  • cpe:2.3:a:nexus_concepts:dev_hound:1.50:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.50:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.51:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.51:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.52:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.52:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.60:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.60:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.61:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.61:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.70:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.70:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.80:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.80:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:1.81:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:1.81:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.01:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.01:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.02:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.02:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.03:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.03:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.04:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.04:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.10:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.11:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.12:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.13:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.13:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.20:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.20:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.21:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.21:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.22:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.22:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.23:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.23:*:*:*:*:*:*:*
  • cpe:2.3:a:nexus_concepts:dev_hound:2.24:*:*:*:*:*:*:*
    cpe:2.3:a:nexus_concepts:dev_hound:2.24:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 08-03-2011 - 02:28)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 16042
misc http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt
secunia 18164
vupen ADV-2005-3047
Last major update 08-03-2011 - 02:28
Published 23-12-2005 - 00:03
Last modified 08-03-2011 - 02:28
Back to Top