Description
The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.
References
- 1011081 vdb-entry
- 11068 vdb-entry
- powerquest-deploycenter-obtain-password(17147) vdb-entry
- 20040827 Power Quest Deploy Center 5.5 boot disks mailing-list
- 9276 vdb-entry