PT-2002-1154 · Funk+1 · Funk Software Proxy Host+1

Published 2002-04-22 · Updated 2008-09-10 · CVE-2002-0065

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Funk Software Proxy Host versions 3.x

Description The issue concerns weak encryption used for the Proxy Host password, allowing local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.

Recommendations For Funk Software Proxy Host version 3.x, consider changing the password storage mechanism to a stronger encryption method to prevent password recovery from the PHOST.INI file or the Windows registry.

Fix

Related Identifiers

CVE-2002-0065

Affected Products

Funk Software Proxy Host

Windows

References · 4

• http://razor.bindview.com/publish/advisories/adv_FunkProxy.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0065 · Security Note
• http://securityfocus.com/bid/4459 · Note
• http://iss.net/security_center/static/8792.php · Note