PT-2001-2154 · Starfish · Starfish Truesync Desktop

Published 2001-08-31 · Updated 2008-09-05 · CVE-2001-1005

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Starfish Truesync Desktop version 2.0b

Description The issue concerns the use of weak encryption to store user passwords in a registry key. This weakness allows attackers with access to the registry key to decrypt the password, potentially gaining privileges.

Recommendations For Starfish Truesync Desktop version 2.0b, consider changing the password storage mechanism to use strong encryption to mitigate the risk of password decryption. As a temporary workaround, restrict access to the registry key to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1005

Affected Products

Starfish Truesync Desktop

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1005 · Security Note
• http://securityfocus.com/archive/1/210067 · Vendor Advisory
• http://securityfocus.com/bid/3231 · Vendor Advisory