Every CVESearch/Get API key

CVE-2003-1439

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in...

4.3 Medium

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Exploit likelihood

0.97%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.3

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
CVE-2003-1439
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
CVE-2003-1439
Updated
2026-11-02
EUVDEUVD-2003-1429No score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
EUVD-2003-1429
Updated
2026-11-03
GitHub AdvisoriesGHSA-4683-gq97-9p3gNo score

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in...

Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.

Record
GHSA-4683-gq97-9p3g
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1439 is a medium vulnerability (CVSS 4.3) in Silc Secure Internet Live Conferencing, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. No source names a fixed version.

References

MoveEnter Open