PT-1999-1547 · Ca · Arcserve Nt Agents

Publicado 1999-02-21 · Atualizado 2021-04-07 · CVE-1999-1049

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARCserve NT agents (affected versions not specified)

Description The issue concerns the use of weak encryption for passwords in ARCserve NT agents. Specifically, the agents utilize XOR encryption, which can be easily decrypted. This weakness allows remote attackers to intercept the authentication request sent to port 6050 and subsequently decrypt the password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1049

Produtos afetados

Arcserve Nt Agents

Referências · 2

• http://marc.info/?l=bugtraq&m=91972006211238&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1049 · Nota de Segurança