PT-2000-1523 · Sawmill · Sawmill

Publicado 2000-06-26 · Atualizado 2013-07-30 · CVE-2000-0589

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SawMill version 5.0.21

Description The issue allows attackers to easily decrypt passwords stored by SawMill due to the use of weak encryption. This enables attackers to modify the SawMill configuration.

Recommendations For SawMill version 5.0.21, consider updating the password storage mechanism to use strong encryption to prevent easy decryption by attackers. As a temporary workaround, restrict access to the SawMill configuration to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2000-0589

Produtos afetados

Sawmill

Referências · 6

• 🔥 https://exploit-db.com/exploits/20042 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0589 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0589 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html · Nota
• http://securityfocus.com/bid/1403 · Nota