CVE Vulnerabilities

CVE-2008-7255

Published: Apr 20, 2010 | Modified: Jun 03, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

login_screen.tcl in aMSN (aka Alvaros Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.

Affected Software

Name Vendor Start Version End Version
Amsn Amsn 0.83 0.83
Amsn Amsn 0.90 0.90
Amsn Amsn 0.91 0.91
Amsn Amsn 0.92 0.92
Amsn Amsn 0.93 0.93
Amsn Amsn 0.94 0.94
Amsn Amsn 0.95 0.95
Amsn Amsn 0.96 0.96
Amsn Amsn * 0.97
Amsn Ubuntu dapper *
Amsn Ubuntu hardy *
Amsn Ubuntu upstream *

References