[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248038

 
 

909

 
 

194772

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-3147Date: (C)2008-07-11   (M)2023-12-22


WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%WeFiUsers, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.7
Exploit Score: 3.4
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: NONE
Availability: NONE
  
Reference:
http://www.securityfocus.com/archive/1/493946/100/0/threaded
http://www.securityfocus.com/archive/1/494026/100/0/threaded
BID-30088
SECUNIA-30966
SREASON-3987
OSVDB-51543
wefi-clientwefilog-info-disclosure(43621)

CWE    1
CWE-200

© SecPod Technologies