Vulnerability Details CVE-2013-4114
The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 69.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-updates/2013-07/msg00072.html
- http://nagstamon.ifw-dresden.de/docs/security/
- http://secunia.com/advisories/54072
- http://secunia.com/advisories/54276
- http://www.openwall.com/lists/oss-security/2013/07/11/7
- https://bugs.gentoo.org/show_bug.cgi?id=476538
- https://bugzilla.redhat.com/show_bug.cgi?id=983673
- http://lists.opensuse.org/opensuse-updates/2013-07/msg00072.html
- http://nagstamon.ifw-dresden.de/docs/security/
- http://secunia.com/advisories/54072
- http://secunia.com/advisories/54276
- http://www.openwall.com/lists/oss-security/2013/07/11/7
- https://bugs.gentoo.org/show_bug.cgi?id=476538
- https://bugzilla.redhat.com/show_bug.cgi?id=983673
Products affected by CVE-2013-4114
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.10
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.11
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.13
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.2
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.3
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.4
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.5
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.6
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.7
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.8
-
cpe:2.3:a:henri_wahl:nagstamon:0.5.9
-
cpe:2.3:a:henri_wahl:nagstamon:0.6
-
cpe:2.3:a:henri_wahl:nagstamon:0.6.1
-
cpe:2.3:a:henri_wahl:nagstamon:0.6.2
-
cpe:2.3:a:henri_wahl:nagstamon:0.7.0
-
cpe:2.3:a:henri_wahl:nagstamon:0.8.0
-
cpe:2.3:a:henri_wahl:nagstamon:0.8.1
-
cpe:2.3:a:henri_wahl:nagstamon:0.8.2
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.0
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.1
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.2
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.3
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.4
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.5
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.6
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.6.1
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.7
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.7.1
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.8
-
cpe:2.3:a:henri_wahl:nagstamon:0.9.9