Unscored CVE-2009-2358 EUVD-2009-2354GHSA-27c9-9r9p-q3x6

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentia…

Published Jul 7, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file.

References

ADV-2009-1816 vdb-entry
20090706 Medium security hole in TekRADIUS mailing-list
http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56