PT-2002-1285 · Compaq · Compaq Intel Pro/Wireless 2011B Lan Usb Device Driver

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0214

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Compaq Intel PRO/Wireless 2011B LAN USB Device Driver versions 1.5.16.0 through 1.5.18.0

Description The issue allows local users to decrypt network traffic by reading the 128-bit WEP key from a registry key with weak permissions, as the key is stored in plaintext.

Recommendations For versions 1.5.16.0 through 1.5.18.0, consider restricting access to the registry key that stores the WEP key to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0214

Produtos afetados

Compaq Intel Pro/Wireless 2011B Lan Usb Device Driver

Referências · 4

• http://online.securityfocus.com/archive/1/252607 · Aviso do Fabricante
• http://iss.net/security_center/static/8015.php · Aviso do Fabricante
• http://securityfocus.com/bid/3968 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0214 · Nota de Segurança