PT-2002-2779 · Teekai · Teekai Tracking Online

CVE-2002-2058 · Publicado 2002-12-31 · Atualizado 2024-02-09

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeeKai Tracking Online version 1.0

Description The issue concerns the weak encryption of web usage statistics stored in the data/userlog/log.txt file. This weakness allows remote attackers to identify the IP addresses of visitors to the site. The encryption method involves dividing each octet by the MD5 hash of '20', which is considered insecure.

Recommendations For TeeKai Tracking Online version 1.0, consider disabling access to the data/userlog/log.txt file until a secure encryption method is implemented to protect web usage statistics. Restrict access to this file to minimize the risk of IP address identification by remote attackers.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2002-2058

Produtos afetados

Teekai Tracking Online

Referências · 5

• 🔥 http://securityfocus.com/bid/4926 · Exploit
• http://online.securityfocus.com/archive/82/275246 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2058 · Nota de Segurança
• https://t.me/cvenotify/70757 · Publicação no Telegram
• http://iss.net/security_center/static/9286.php · Nota