PT-2000-1523 · Sawmill · Sawmill

Published 2000-06-26 · Updated 2013-07-30 · CVE-2000-0589

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SawMill version 5.0.21

Description The issue allows attackers to easily decrypt passwords stored by SawMill due to the use of weak encryption. This enables attackers to modify the SawMill configuration.

Recommendations For SawMill version 5.0.21, consider updating the password storage mechanism to use strong encryption to prevent easy decryption by attackers. As a temporary workaround, restrict access to the SawMill configuration to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2000-0589

Affected Products

Sawmill

References · 6

• 🔥 https://exploit-db.com/exploits/20042 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0589 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0589 · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html · Note
• http://securityfocus.com/bid/1403 · Note