CVE-2006-3785

EPSS 0.08%
Published 24.07.2006 12:19:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif (aka caller or CallerID) file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Symantec ≫ Pcanywhere Version12.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.205

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://securityreason.com/securityalert/1261

http://www.digitalbullets.org/?p=3

http://www.securityfocus.com/archive/1/440448/100/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2006-3785

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-3785

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-3785

EUVD