PT-2001-2155 · Starfish · Starfish Truesync Desktop

Publicado 2001-08-31 · Atualizado 2008-09-05 · CVE-2001-1006

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Starfish Truesync Desktop version 2.0b

Description The issue concerns the lack of encryption for sensitive files in the software, which relies solely on a password feature for access restriction. This allows an attacker to read the sensitive files using a different application, bypassing the password protection.

Recommendations For version 2.0b, consider implementing additional security measures such as encryption for sensitive files to prevent unauthorized access. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1006

Produtos afetados

Starfish Truesync Desktop

Referências · 3

• http://securityfocus.com/bid/3232 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1006 · Nota de Segurança
• http://securityfocus.com/archive/1/210067 · Aviso do Fabricante