CVE-2006-7163

DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which allows attackers with physical access to read the database contents via an unspecified authentication bypass. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2007-03-10

Last modified

2024-09-16

Affected products

• Password Master (Dreameesoft)

References

• http://www.securityfocus.com/bid/19983