PT-2000-1494 · Ca · Etrust Intrusion Detection System

Published 2000-06-07 · Updated 2021-04-09 · CVE-2000-0559

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions eTrust Intrusion Detection System (formerly SessionWall-3) (affected versions not specified)

Description The issue concerns the use of weak encryption (XOR) to store administrative passwords in the registry. This allows local users to easily decrypt the passwords.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0559

Affected Products

Etrust Intrusion Detection System

References · 4

• 🔥 https://exploit-db.com/exploits/20012 · Exploit
• 🔥 http://securityfocus.com/bid/1341 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0559 · Security Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net · Note