PT-2001-2134 · Idm Computer Solutions · Ultraedit

Published 2001-08-31 · Updated 2016-10-18 · CVE-2001-0983

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UltraEdit (affected versions not specified)

Description The issue concerns the use of weak encryption by UltraEdit to store FTP passwords in the uedit32.ini file. This weakness allows local users with read access to the file to decrypt the passwords, potentially gaining privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0983

Affected Products

Ultraedit

References · 4

• 🔥 https://exploit-db.com/exploits/21091 · Exploit
• 🔥 http://eve-software.com/security/ueditpw.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0983 · Security Note
• http://marc.info/?l=bugtraq&m=99861651923668&w=2 · Note