CVE-2009-2429: Medium severity mcafee smartfilter vulnerability
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2429?
CVE-2009-2429 is considered a high severity vulnerability due to the risk of privilege escalation from improperly secured credentials.
How do I fix CVE-2009-2429?
To fix CVE-2009-2429, ensure that sensitive files like admin_backup.xml are deleted or secured with proper permissions, and consider upgrading to a more secure version of SmartFilter.
What systems are affected by CVE-2009-2429?
CVE-2009-2429 affects McAfee SmartFilter version 4.2.1.00.
What are the risks associated with CVE-2009-2429?
The risks associated with CVE-2009-2429 include unauthorized access to admin credentials, which can lead to system compromise and privilege escalation.
Who is impacted by CVE-2009-2429?
Local users with access to the system can be impacted by CVE-2009-2429 as they can potentially exploit the cleartext storage of credentials.