PT-2002-2667 · Videsh Sanchar Nigam Limited · Vsnl Integrated Dialer

Published 2002-12-31 · Updated 2024-02-14 · CVE-2002-1946

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000

Description The issue concerns the storage of passwords using a weak encryption scheme, specifically a one-to-one mapping, in a registry key when the "Save Password" option is used. This allows local users to obtain and decrypt the password.

Recommendations For Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000, consider disabling the "Save Password" option to prevent passwords from being stored with weak encryption until a proper fix is available.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2002-1946

Affected Products

Vsnl Integrated Dialer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1946 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html · Note
• https://t.me/cvenotify/71370 · Telegram Post
• http://iss.net/security_center/static/10517.php · Note