CVE-2005-0604: lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plainte...

Security readout for executives and security teams

GFI Languard Network Security Scanner 5.0 reportedly kept usernames and passwords in plaintext in lnss.exe memory. If the scanner was run with domain administrator credentials, a local administrator on that host could recover them. The business risk is concentrated but serious: compromise of domain admin credentials can affect many systems. Exposure is likely limited to legacy environments still running GFI Languard Network Security Scanner 5.0, especially where scans use domain administrator credentials. Modern deployments or different versions are not identified as affected in the provided sources. Treat as high priority only if the legacy scanner exists or domain admin credentials were used there. The main concern is credential compromise, not remote code execution. If the product is absent, no action is needed beyond documenting non-exposure. Mitigation focus: Identify any remaining GFI Languard Network Security Scanner 5.0 installations.; Check current vendor guidance for upgrade, retirement, or compensating controls.; Avoid using domain administrator credentials for scanning where operationally possible..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.