CVE-2005-3209

Description

Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/22549

http://www.osvdb.org/19939

http://secunia.com/advisories/17117/

http://marc.info/?l=bugtraq&m=112872593432359&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS