PT-2002-2875 · Cerulean Studios · Trillian

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2162

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Cerulean Studios Trillian versions 0.73 and earlier

Description: The issue concerns the use of weak encryption, specifically XOR, for storing user passwords in .ini files within the Trillian directory. This weakness allows local users to gain access to other user accounts.

Recommendations: For versions 0.73 and earlier, consider updating the password storage mechanism to use a more secure encryption method to protect user passwords. As a temporary workaround, restrict access to the Trillian directory and .ini files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-2162

Produtos afetados

Trillian

Referências · 5

• 🔥 http://securityfocus.com/bid/5677 · Exploit
• 🔥 https://exploit-db.com/exploits/21781 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2162 · Nota de Segurança
• http://securityfocus.com/archive/1/291071 · Nota
• http://iss.net/security_center/static/10092.php · Nota