PT-2000-1721 · Winu · Winu

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0789

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WinU versions 5.x and earlier

Description The issue allows local users to decrypt the configuration password and gain privileges due to weak encryption used to store the password.

Recommendations For versions 5.x and earlier, update to a version that uses strong encryption to store the configuration password.

Fix

Related Identifiers

CVE-2000-0789

Affected Products

Winu

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0789 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-08/0201.html · Vendor Advisory