PT-1999-1547 · Ca · Arcserve Nt Agents

Published 1999-02-21 · Updated 2021-04-07 · CVE-1999-1049

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARCserve NT agents (affected versions not specified)

Description The issue concerns the use of weak encryption for passwords in ARCserve NT agents. Specifically, the agents utilize XOR encryption, which can be easily decrypted. This weakness allows remote attackers to intercept the authentication request sent to port 6050 and subsequently decrypt the password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1049

Affected Products

Arcserve Nt Agents

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1049 · Security Note
• http://marc.info/?l=bugtraq&m=91972006211238&w=2 · Note