Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hotline_connect | Hotline_communications | 1.8.5 (including) | 1.8.5 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=101495128121299\u0026w=2
- http://www.iss.net/security_center/static/8327.php
- http://www.securityfocus.com/bid/4210
- http://marc.info/?l=bugtraq\u0026m=101495128121299\u0026w=2
- http://www.iss.net/security_center/static/8327.php
- http://www.securityfocus.com/bid/4210