PT-2002-1096 · Intego · Intego Fileguard

Published 2002-03-15 · Updated 2008-09-05 · CVE-2001-1165

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intego FileGuard version 4.0

Description The issue concerns the use of weak encryption to store user information and passwords. This weakness allows local users to gain privileges by decrypting the stored information, for example, using the Disengage tool.

Recommendations For Intego FileGuard version 4.0, consider updating the encryption method to a stronger alternative to prevent unauthorized access to user information and passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-1165

Affected Products

Intego Fileguard

References · 5

• 🔥 https://exploit-db.com/exploits/21076 · Exploit
• 🔥 http://securityfocus.com/bid/3213 · Exploit
• http://iss.net/security_center/static/7018.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1165 · Security Note
• http://securemac.com/fileguard.php#disengage · Note