PT-2001-2134 · Idm Computer Solutions · Ultraedit

Publicado 2001-08-31 · Atualizado 2016-10-18 · CVE-2001-0983

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UltraEdit (affected versions not specified)

Description The issue concerns the use of weak encryption by UltraEdit to store FTP passwords in the uedit32.ini file. This weakness allows local users with read access to the file to decrypt the passwords, potentially gaining privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0983

Produtos afetados

Ultraedit

Referências · 4

• 🔥 https://exploit-db.com/exploits/21091 · Exploit
• 🔥 http://eve-software.com/security/ueditpw.html · Exploit
• http://marc.info/?l=bugtraq&m=99861651923668&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0983 · Nota de Segurança