Description
Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents.
References
- 19078 vdb-entry
- 1016565 vdb-entry
- 1308 third-party-advisory
- http://www.symantec.com/enterprise/research/SYMSA-2006-008.txt
- passwordsafe-lock-weak-security(27933) vdb-entry
- 20060721 SYMSA-2006-008:Password Safe - Lock Password Database Configuration Not Enforced mailing-list