CVE-2008-1970: muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obta...

Security readout for executives and security teams

muCommander before 0.8.2 could save stored credentials in credentials.xml with permissions that were too open. A person who already has local access to the same system might read those credentials. This is mainly a workstation or shared-host risk, not a remote internet-facing vulnerability based on the provided sources. Exposure is most likely on systems running muCommander before 0.8.2 where credentials were saved and local user separation matters, such as shared workstations, terminal servers, or multi-user Unix-like hosts. Treat this as a targeted cleanup item, not an emergency internet-wide incident. Prioritize shared systems or administrator workstations where stored credentials could expose higher-value services. Mitigation focus: Upgrade muCommander to 0.8.2 or later, validating against vendor guidance.; Review credentials.xml permissions and restrict access to the owning user.; Rotate credentials that may have been stored on affected systems..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.