Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Microsoft Baseline Security Analyzer Plaintext Result File Vulnerability

Microsoft Baseline Security Analyzer (MBSA) is a tool which scans a Microsoft Windows system and creates a security report including a variety of information about the target system.

MBSA stores result information in an XML file placed in a predictable location. An attacker with local access, or the ability to read known local files, may access this file and gain access to sensitive system information.







 

Privacy Statement
Copyright 2008, SecurityFocus