Search the archives!
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Quicksilver Social Bookmark plugin v.8F: password in clear text
- From: mperience at googlemail.com (max perience)
- Subject: [Full-disclosure] Quicksilver Social Bookmark plugin v.8F: password in clear text
- Date: Wed, 28 Feb 2007 13:21:20 +0100
Quicksilver http://quicksilver.blacktree.com/ is a tool to quickly find/launch/do anything you like with all kind of files, bookmarks etcpp on MacOSX (>=10.3) There exists a plug-in "Social Bookmarks" to integrate and search del.icio.us bookmarks. In version 8F this plugin logs the username and password to Console.log. Console.log is archived in /Library/Logs/Console/UID Passwords should never appear anywhere on the disk in clear text. The issue seems to be fixed in newer versions of the plug-in. Update now. MaxP
- Prev by Date: [Full-disclosure] WordPress Search Function SQL-Injection
- Next by Date: [Full-disclosure] Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
- Previous by thread: [Full-disclosure] German cops and spooks prep own spyware
- Next by thread: [Full-disclosure] Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
- Index(es):