Unscored severity · published Apr 27, 2008
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials
–
CVSS
0.3%
EPSS
No
On KEV
Description
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Mucommander · Mucommander
through 0.8; 0.1; 0.2; 0.3; 0.4; 0.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1970
Vendor Advisory
http://secunia.com/advisories/29893
www.mucommander.com
http://www.mucommander.com/changes.php
www.securityfocus.com
http://www.securityfocus.com/bid/28875
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41908
More from Mucommander
4.7
CVE-2026-110231
muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP
