Every CVESearch/Get API key

CVE-2011-3198

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line...

2.1 Low

CVE-2011-3198 is a low vulnerability (CVSS 2.1) in Gplhost Domain Technologie Control, published December 18, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.34%EPSS, 27th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Exploit likelihood

0.34%Down 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dtc
Debian:5.0
From an advisory covering 5 CVEs
before 0.29.18-1+lenny2, plus listed versions
0.29.17-10.29.17-1+lenny1
0.29.18-1+lenny2

What each source reports

NVD Score used2.1

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Record
CVE-2011-3198
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Record
CVE-2011-3198
Updated
2026-11-02
EUVDEUVD-2011-3162No score

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Record
EUVD-2011-3162
Updated
2026-11-03
GitHub AdvisoriesGHSA-f898-qp22-mgrrNo score

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line...

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

Record
GHSA-f898-qp22-mgrr
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open