PT-2004-1900 · Lexar · Lexar Safe Guard For Jumpdrive Secure

Publicado 2004-09-13 · Atualizado 2017-07-11 · CVE-2004-0838

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Lexar Safe Guard for JumpDrive Secure version 1.0

Description: The issue concerns the insecure storage of passwords in memory. Specifically, it uses XOR encryption, allowing local users to directly read the password from the device and access the password-protected part of the drive.

Recommendations: For Lexar Safe Guard for JumpDrive Secure version 1.0, consider disabling the password protection feature until a secure method of password storage is implemented. Restrict access to the device to minimize the risk of exploitation. Avoid using the password protection feature in sensitive environments until the issue is resolved.

Correção

Identificadores relacionados

CVE-2004-0838

Produtos afetados

Lexar Safe Guard For Jumpdrive Secure

Referências · 5

• http://securityfocus.com/bid/11162 · Aviso do Fabricante
• http://atstake.com/research/advisories/2004/a091304-1.txt · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17342 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0838 · Nota de Segurança
• http://secunia.com/advisories/12522 · Aviso do Fabricante