Description
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.
References
- smartfilter-configtxt-info-disclosure(49338) vdb-entry
- 20090319 Secure Computing (McAfee) Smart Filter possible issue mailing-list
- 34390 third-party-advisory