PT-2001-2152 · Respondus+1 · Respondus+1

Published 2001-08-31 · Updated 2016-10-18 · CVE-2001-1003

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Respondus version 1.1.2 for WebCT

Description The issue concerns the use of weak encryption for storing usernames and passwords. This weakness allows local users, who have access to the WEBCT.SVR file, to decrypt the passwords. As a result, these users can gain additional privileges.

Recommendations For Respondus version 1.1.2 for WebCT, consider restricting access to the WEBCT.SVR file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-1003

Affected Products

Respondus

Webct

References · 3

• 🔥 https://exploit-db.com/exploits/21078 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1003 · Security Note
• http://marc.info/?l=bugtraq&m=99859557930285&w=2 · Note