PT-2001-2154 · Starfish · Starfish Truesync Desktop

Publicado 2001-08-31 · Atualizado 2008-09-05 · CVE-2001-1005

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Starfish Truesync Desktop version 2.0b

Description The issue concerns the use of weak encryption to store user passwords in a registry key. This weakness allows attackers with access to the registry key to decrypt the password, potentially gaining privileges.

Recommendations For Starfish Truesync Desktop version 2.0b, consider changing the password storage mechanism to use strong encryption to mitigate the risk of password decryption. As a temporary workaround, restrict access to the registry key to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1005

Produtos afetados

Starfish Truesync Desktop

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1005 · Nota de Segurança
• http://securityfocus.com/archive/1/210067 · Aviso do Fabricante
• http://securityfocus.com/bid/3231 · Aviso do Fabricante