Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-6191

Overview

Vulnerability Score 2.1 2.1
CVE Id CVE-2008-6191
Last Modified 15 Jul 2009 01:36:59
Published 19 Feb 2009 01:30:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2008-6191

Summary

Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries.

Vulnerable Systems

Application

  • Intrinsic Swimage Encore 5.x


References

CERT-VN - VU#778427

XF - swimage-encore-default-password(44538)

BID - 30736

SECUNIA - 31540


Last Updated: 27 May 2016 10:49:06