PT-2005-3742 · Advansysperu · Usb Lock Auto-Protect

Unsecure · Publicado 2005-09-14 · Atualizado 2016-10-18 · CVE-2005-2879

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Advansysperu Software USB Lock Auto-Protect (AP) version 1.5

Description The issue concerns a weak encryption scheme used to encrypt passwords, allowing local users to obtain sensitive information and bypass protection mechanisms for the USB interface.

Recommendations For version 1.5, consider updating the encryption scheme to a more secure method to protect passwords and prevent unauthorized access to the USB interface. As a temporary workaround, restrict access to sensitive information and limit the use of the USB interface until a more secure encryption method is implemented.

Exploit

Correção

Identificadores relacionados

CVE-2005-2879

Produtos afetados

Usb Lock Auto-Protect

Referências · 3

• 🔥 http://shadock.net/secubox/.data/adv_usblock · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2879 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112606328118852&w=2 · Nota