CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-255

Affected products

• Secure Internet Live Conferencing (Silc)

References

• http://www.securityfocus.com/archive/1/309775
• http://www.securityfocus.com/archive/1/309941/30/26090/threaded
• http://www.securityfocus.com/bid/6743
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11244