CVE-2013-4114
16.08.2013, 17:55
The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.Enginsight
| Vendor | Product | Version |
|---|---|---|
| henri_wahl | nagstamon | 𝑥 ≤ 0.9.9 |
| henri_wahl | nagstamon | 0.5.2 |
| henri_wahl | nagstamon | 0.5.3 |
| henri_wahl | nagstamon | 0.5.4 |
| henri_wahl | nagstamon | 0.5.5 |
| henri_wahl | nagstamon | 0.5.6 |
| henri_wahl | nagstamon | 0.5.7 |
| henri_wahl | nagstamon | 0.5.8 |
| henri_wahl | nagstamon | 0.5.9 |
| henri_wahl | nagstamon | 0.5.10 |
| henri_wahl | nagstamon | 0.5.11 |
| henri_wahl | nagstamon | 0.5.13 |
| henri_wahl | nagstamon | 0.6 |
| henri_wahl | nagstamon | 0.6.1 |
| henri_wahl | nagstamon | 0.6.2 |
| henri_wahl | nagstamon | 0.7.0 |
| henri_wahl | nagstamon | 0.8.0 |
| henri_wahl | nagstamon | 0.8.1 |
| henri_wahl | nagstamon | 0.8.2 |
| henri_wahl | nagstamon | 0.9.0 |
| henri_wahl | nagstamon | 0.9.1 |
| henri_wahl | nagstamon | 0.9.2 |
| henri_wahl | nagstamon | 0.9.3 |
| henri_wahl | nagstamon | 0.9.4 |
| henri_wahl | nagstamon | 0.9.5 |
| henri_wahl | nagstamon | 0.9.6 |
| henri_wahl | nagstamon | 0.9.6.1 |
| henri_wahl | nagstamon | 0.9.7 |
| henri_wahl | nagstamon | 0.9.7.1 |
| henri_wahl | nagstamon | 0.9.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References