CVE-2005-2444: Low severity cerulean studios trillian pro vulnerability
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2444?
CVE-2005-2444 is considered a moderate severity vulnerability due to the exposure of sensitive information.
How do I fix CVE-2005-2444?
To fix CVE-2005-2444, ensure that the application is updated to a later version of Trillian Pro that does not store passwords in plaintext.
What types of systems are affected by CVE-2005-2444?
CVE-2005-2444 specifically affects Trillian Pro version 3.1 build 121.
What are the risks associated with CVE-2005-2444?
The risks of CVE-2005-2444 include local users being able to read stored email passwords, leading to unauthorized access.
Is CVE-2005-2444 still a concern today?
While CVE-2005-2444 was identified many years ago, it remains a concern for users still employing affected versions without updates.