1. CVE-Search
  2. CVE-2011-0436
ID CVE-2011-0436
Summary The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
References
Vulnerable Configurations
  • cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.7:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:0.32.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:*
    cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 17-08-2017 - 01:33)
Impact:
Exploitability:
CWE CWE-310
CAPEC
  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
confirm
debian DSA-2179
mlist
  • [dtcannounce] 20110303 Fwd: [SECURITY] [DSA 2179-1] dtc security update
  • [oss-security] 20110222 CVE-2011-0436: dtc sends password of new users to site admin by unencrypted email
secunia 43523
vupen ADV-2011-0556
xf dtc-passwords-info-disc(65898)
Last major update 17-08-2017 - 01:33
Published 07-03-2011 - 21:00
Last modified 17-08-2017 - 01:33
Back to Top