PT-2005-3742 · Advansysperu · Usb Lock Auto-Protect

Unsecure · Published 2005-09-14 · Updated 2016-10-18 · CVE-2005-2879

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Advansysperu Software USB Lock Auto-Protect (AP) version 1.5

Description The issue concerns a weak encryption scheme used to encrypt passwords, allowing local users to obtain sensitive information and bypass protection mechanisms for the USB interface.

Recommendations For version 1.5, consider updating the encryption scheme to a more secure method to protect passwords and prevent unauthorized access to the USB interface. As a temporary workaround, restrict access to sensitive information and limit the use of the USB interface until a more secure encryption method is implemented.

Exploit

Fix

Related Identifiers

CVE-2005-2879

Affected Products

Usb Lock Auto-Protect

References · 3

• 🔥 http://shadock.net/secubox/.data/adv_usblock · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2879 · Security Note
• http://marc.info/?l=bugtraq&m=112606328118852&w=2 · Note