Description
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- smartfilter-configtxt-info-disclosure(49338) vdb-entry
- 20090319 Secure Computing (McAfee) Smart Filter possible issue mailing-list
- 34390 third-party-advisory