PT-2002-2406 · Newsreactor · Newsreactor

Published 2002-12-31 · Updated 2024-02-14 · CVE-2002-1682

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NewsReactor version 1.0

Description The issue is related to a weak encryption scheme used by the software, which could allow local users to decrypt passwords and gain access to other users' newsgroup accounts.

Recommendations For NewsReactor version 1.0, consider changing the encryption scheme to a stronger one to prevent local users from decrypting passwords and gaining unauthorized access to newsgroup accounts. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation.

Exploit

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2002-1682

Affected Products

Newsreactor

References · 5

• 🔥 http://securiteam.com/windowsntfocus/5SP0P0K60C.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1682 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7968 · Note
• https://t.me/cvenotify/71379 · Telegram Post
• http://securityfocus.com/bid/3927 · Note