Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1606. PoCs published by Morning Wood.
AI-analyzed exploit summary This writeup describes an information disclosure vulnerability in Positive Software H-Sphere Winbox where user credentials are stored in plaintext within log files. The vulnerability allows local users with access to the log files to retrieve sensitive account information.
Description
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.
Exploits (1)
This writeup describes an information disclosure vulnerability in Positive Software H-Sphere Winbox where user credentials are stored in plaintext within log files. The vulnerability allows local users with access to the log files to retrieve sensitive account information.