PT-2002-1096 · Intego · Intego Fileguard

Publicado 2002-03-15 · Atualizado 2008-09-05 · CVE-2001-1165

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intego FileGuard version 4.0

Description The issue concerns the use of weak encryption to store user information and passwords. This weakness allows local users to gain privileges by decrypting the stored information, for example, using the Disengage tool.

Recommendations For Intego FileGuard version 4.0, consider updating the encryption method to a stronger alternative to prevent unauthorized access to user information and passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-1165

Produtos afetados

Intego Fileguard

Referências · 5

• 🔥 https://exploit-db.com/exploits/21076 · Exploit
• 🔥 http://securityfocus.com/bid/3213 · Exploit
• http://iss.net/security_center/static/7018.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1165 · Nota de Segurança
• http://securemac.com/fileguard.php#disengage · Nota