PT-2000-1539 · Blackboard · Blackboard Courseinfo

Published 2000-07-10 · Updated 2008-09-10 · CVE-2000-0605

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Blackboard CourseInfo version 4.0

Description The issue concerns the storage of sensitive information. Blackboard CourseInfo 4.0 stores local and SQL administrator user names and passwords in cleartext in a registry key. The access control for this registry key allows users to access the passwords.

Recommendations For Blackboard CourseInfo version 4.0, consider restricting access to the registry key that stores the local and SQL administrator user names and passwords to minimize the risk of exploitation. As a temporary workaround, limit user privileges to prevent unauthorized access to sensitive information.

Fix

Related Identifiers

CVE-2000-0605

Affected Products

Blackboard Courseinfo

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0605 · Security Note
• http://securityfocus.com/bid/1460 · Note
• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0605 · Note