2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2013-4114" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2013-08-16T17:55:05.130" ,
"lastModified" : "2013-08-21T18:37:25.093" ,
"vulnStatus" : "Analyzed" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network."
} ,
{
"lang" : "es" ,
"value" : "La solicitud de actualizaci\u00f3n autom\u00e1tica en Nagstamont anterior a v0.9.10 utiliza un formato base64 en texto plano para la transmisi\u00f3n de un nombre de usuario y contrase\u00f1a, permitiendo a atacantes remotos obtener informaci\u00f3n sensible mediante la captura de datos en la red."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.0
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-255"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "0.9.9" ,
"matchCriteriaId" : "5DB6A146-3031-47F4-84FC-7BF70C02B445"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DA149508-732E-4B9A-A85A-FF8FC15F6FC2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DAC86F78-16D9-450D-9F45-D50AAD5C8339"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3F1CDC43-0A1F-4DF6-AD21-3B7795C1EDEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D33A553B-311E-489B-9D75-EAD68C82B940"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB4479B5-94C2-4E8E-9CA2-324302F2E30D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4A62D3F9-A8E3-4FA5-981F-75630B377CEA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6EFC70B8-DC95-4F08-9655-289323005C3C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7EBB248C-BDC0-42D9-B34A-64A021649037"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B723FF8-0EC2-4ECF-9BB4-1831A99C8727"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE1798CA-9FDD-4BC7-8A1A-FDA0E1245375"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.5.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "282B5C7C-1F4C-4025-9D0F-AA7A0FA7ADCB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "83D3D381-A430-4DA9-A799-3FC97913CED5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.6.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D391AD7-1006-41E9-9065-FC96990EE40F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.6.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "73A994F3-6C74-4BAF-BB11-338B301C2873"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.7.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F3BD16D-DCD5-4F37-8BE9-A1C3DE3AE84A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AA74965-8205-45CD-854B-45B43E31E069"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0FCFE7F3-9885-4EA9-BCB8-6E5539C00A2E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.8.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "47DAAEB7-B9F3-48EC-870C-E59DF41EC225"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8BB3AD24-8D44-475D-9C96-2FFE8B309F72"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "50F016B1-2B53-4218-9CB2-68900318876E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "96E355F3-6305-4851-9D8B-13B9E852B83F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1FB1B21E-7DBF-442E-AB3D-0D28D62D4D9C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BAF60FAF-17F2-41B5-9864-660FEF019AE3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1E33868B-FA07-4449-A51D-2BADD29087E1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7C39E932-8913-48D6-973F-805E6EA65503"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.6.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "26C6E7BC-32B9-483C-B266-8D95C79FAA95"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F2A0243-7599-4E2F-B4E6-520382CB15F3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.7.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5BD2E926-7A32-409D-8A78-F858E629C9B3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:henri_wahl:nagstamon:0.9.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A4E1BDC-85F0-4DAD-B6BD-14A4DCE15AA3"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://lists.opensuse.org/opensuse-updates/2013-07/msg00072.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://nagstamon.ifw-dresden.de/docs/security/" ,
"source" : "secalert@redhat.com"
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/54072" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://secunia.com/advisories/54276" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.openwall.com/lists/oss-security/2013/07/11/7" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bugs.gentoo.org/show_bug.cgi?id=476538" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=983673" ,
"source" : "secalert@redhat.com"
}
]
}
