CVE-2005-4506

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/18164Patch, Vendor Advisory
http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/16042Patch
http://www.vupen.com/english/advisories/2005/3047
http://secunia.com/advisories/18164Patch, Vendor Advisory
http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/16042Patch
http://www.vupen.com/english/advisories/2005/3047

Timeline

Published: Dec 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-45074.3Multiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier allow remote attackers to inject arbitrary CVE-2005-45085.0Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll f CVE-2005-45097.5SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. NOTE: CVE-2005-45105.0Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in CVE-2005-45114.6Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possibly execute arbitrary CVE-2005-45124.3Cross-site scripting (XSS) vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via un CVE-2005-45134.3Cross-site scripting (XSS) vulnerability in WANDSOFT e-SEARCH allows remote attackers to inject arbitrary web script or HTML via unspecified CVE-2005-45145.0The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows atta CVE-2005-45157.5SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search parame CVE-2005-45164.3Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web s CVE-2005-45177.5SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the rating CVE-2005-45187.5Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1) bug_