CVE-2009-2429

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-07-10 · updated 2026-06-16
Weakness: CWE-255

Description

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

McAfee Smartfilter: 4.2.1.00

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
http://secunia.com/advisories/34390
https://exchange.xforce.ibmcloud.com/vulnerabilities/49338
http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
http://secunia.com/advisories/34390
https://exchange.xforce.ibmcloud.com/vulnerabilities/49338

Get alerted when CVE-2009-2429 or the next vulnerability affects your stack