|
|
CVE Reference: CVE-2008-3003 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-3003 |
|
|
Description: Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability." |
|
|
CVE Status: Candidate |
|
|
References: ST 1020669 SAID Secunia Advisory: SA31454 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5951 MS http://www.microsoft.com/technet/security/Bulletin/MS08-043.mspx HP http://marc.info/?l=bugtraq&m=121915960406986&w=2 CERT http://www.us-cert.gov/cas/techalerts/TA08-225A.html BID 30641 |
|
| Return to the previous page. |
