PT-2001-2152 · Respondus+1 · Respondus+1

Publicado 2001-08-31 · Atualizado 2016-10-18 · CVE-2001-1003

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Respondus version 1.1.2 for WebCT

Description The issue concerns the use of weak encryption for storing usernames and passwords. This weakness allows local users, who have access to the WEBCT.SVR file, to decrypt the passwords. As a result, these users can gain additional privileges.

Recommendations For Respondus version 1.1.2 for WebCT, consider restricting access to the WEBCT.SVR file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-1003

Produtos afetados

Respondus

Webct

Referências · 3

• 🔥 https://exploit-db.com/exploits/21078 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1003 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=99859557930285&w=2 · Nota