CVE-2008-1970

Description

muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.

Affected Platforms

Weakness Type

CWE-255

References

• http://secunia.com/advisories/29893
• http://www.mucommander.com/changes.php
• http://www.securityfocus.com/bid/28875
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41908
• http://secunia.com/advisories/29893
• http://www.mucommander.com/changes.php