CVE-2016-5119

概要

参考情報

• bogner.sh/2016/03/mitm-attack-against-keepass-2s-update-check · Exploit
• packetstormsecurity.com/files/137274/KeePass-2-Man-In-The-Middle.html · Third Party Advisory
• sourceforge.net/p/keepass/discussion/329220/thread/e430cc12 · Patch

keepass のその他の脆弱性

• CVE-2023-32784高 7.5In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or n…
• CVE-2023-24055中 5.5KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clear…
• CVE-2022-0725高 7.5A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Expo…
• CVE-2019-20184高 7.8KeePass 2.4.1 allows CSV injection in the title field of a CSV export.
• CVE-2017-1000066高 7.5The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the…