[Pidgin] #14583: Plain-text User Credential Disclosure in Pidgin process memory

Pidgin trac at pidgin.im
Fri Sep 9 00:07:14 EDT 2011


#14583: Plain-text User Credential Disclosure in Pidgin process memory
-------------------------+--------------------------------------------------
 Reporter:  yehgdotnet   |       Owner:  rekkanoryo  
     Type:  enhancement  |      Status:  new         
Milestone:  2.10.1       |   Component:  unclassified
  Version:  2.10.0       |    Keywords:              
-------------------------+--------------------------------------------------
 It's possible to recover user credentials unencrypted in the memory of
 pidgin with memory dump tool.


 This issue is documented at CWE-316
 http://cwe.mitre.org/data/definitions/316.html

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14583>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list