CVE-2005-0619

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14455Vendor Advisory
http://securitytracker.com/id?1013316Vendor Advisory
http://www.osvdb.org/14212Vendor Advisory
https://www.exploit-db.com/exploits/846
http://secunia.com/advisories/14455Vendor Advisory
http://securitytracker.com/id?1013316Vendor Advisory
http://www.osvdb.org/14212Vendor Advisory
https://www.exploit-db.com/exploits/846

Timeline

Published: Feb 28, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-06202.1Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the infor CVE-2005-06215.0Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated CVE-2005-06225.0RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request f CVE-2005-06237.5Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a lo CVE-2005-06242.1reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email CVE-2005-06252.1reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.CVE-2005-06262.6Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may c CVE-2005-06274.6Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PA CVE-2005-06284.3Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the CVE-2005-06294.3Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTM CVE-2005-06302.1sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.CVE-2005-06312.1delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.