Every CVE Search/ Get API key

CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in...

4.3 Medium

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Exploit likelihood

0.97%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
CVE-2003-1439
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-255
Updated
2026-11-02
CVE List No score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
CVE-2003-1439
Updated
2026-11-02
EUVDEUVD-2003-1429 No score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
EUVD-2003-1429
Updated
2026-11-03
GitHub AdvisoriesGHSA-4683-gq97-9p3g No score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in...

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
GHSA-4683-gq97-9p3g
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1439 is a medium vulnerability (CVSS 4.3) in Silc Secure Internet Live Conferencing, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 61st percentile. No source names a fixed version.

References

MoveEnter Open