PT-2002-2667 · Videsh Sanchar Nigam Limited · Vsnl Integrated Dialer

CVE-2002-1946 · Publicado 2002-12-31 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000

Description The issue concerns the storage of passwords using a weak encryption scheme, specifically a one-to-one mapping, in a registry key when the "Save Password" option is used. This allows local users to obtain and decrypt the password.

Recommendations For Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000, consider disabling the "Save Password" option to prevent passwords from being stored with weak encryption until a proper fix is available.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2002-1946

Produtos afetados

Vsnl Integrated Dialer

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html · Nota
• https://t.me/cvenotify/71370 · Publicação no Telegram
• http://iss.net/security_center/static/10517.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1946 · Nota de Segurança