Unscored CVE-2006-4615 EUVD-2006-4603GHSA-776f-3636-jh6h

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.…

Published Sep 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file.

References

1518 third-party-advisory
20060903 Airscanner Mobile Security Advisory #05081701: IM+ v3.10 Local Password Plaintext Exposure mailing-list
http://airscanner.com/security/05081701_implus.htm