PT-2008-5134 · Newsoft · Folder Lock

Charalambous Glafkos + 1 · Published 2008-08-22 · Updated 2025-01-17 · CVE-2008-3775

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Folder Lock versions 5.9.5 and earlier

Description The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypting the QualityControl pack registry value.

Recommendations For Folder Lock versions 5.9.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2008-3775

Affected Products

Folder Lock

References · 7

• http://secunia.com/advisories/31559 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3775 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44575 · Note
• http://securityfocus.com/bid/30771 · Note
• http://securityreason.com/securityalert/4183 · Note
• http://securityfocus.com/archive/1/495612/100/0/threaded · Note
• https://t.me/cvenotify/107779 · Telegram Post