Back to search
CVE-2011-0436
Published: Mar 7, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
43523
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0556
vdb-entry
x_refsource_VUPEN
[oss-security] 20110222 CVE-2011-0436: dtc sends password of new users to site admin by unencrypted email
mailing-list
x_refsource_MLIST
DSA-2179
vendor-advisory
x_refsource_DEBIAN
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614302
x_refsource_CONFIRM
dtc-passwords-info-disc(65898)
vdb-entry
x_refsource_XF
[dtcannounce] 20110303 Fwd: [SECURITY] [DSA 2179-1] dtc security update
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now