CVE-2005-3209

Published: Oct 14, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.

Affected (3)

Products: Aenovo: Aenovo, Aenovoshop, Aenovowysi

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Aenovo Aenovo	All versions
Aenovo Aenovoshop	All versions
Aenovo Aenovowysi	All versions

References (10)

http://marc.info/?l=bugtraq&m=112872593432359&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17117/

Source: cve@mitre.org

Vendor Advisory

http://www.kapda.ir/advisory-78.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/19939

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22549

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112872593432359&w=2