CVE-2005-4412

Published: Dec 20, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field.

Affected (1)

Products: Citrix: Program Neighborhood Client

1 product

Program Neighborhood Client

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Citrix Program Neighborhood Client	Up to 9.1

References (4)

http://securitytracker.com/id?1015372

Source: cve@mitre.org

Exploit

http://support.citrix.com/article/CTX108108

Source: cve@mitre.org

ExploitVendor Advisory

http://securitytracker.com/id?1015372

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://support.citrix.com/article/CTX108108

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.