PT-2002-2406 · Newsreactor · Newsreactor

CVE-2002-1682

·

Publicado

2002-12-31

·

Atualizado

2024-02-14

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions NewsReactor version 1.0
Description The issue is related to a weak encryption scheme used by the software, which could allow local users to decrypt passwords and gain access to other users' newsgroup accounts.
Recommendations For NewsReactor version 1.0, consider changing the encryption scheme to a stronger one to prevent local users from decrypting passwords and gaining unauthorized access to newsgroup accounts. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation.

Exploit

Correção

Inadequate Encryption Strength

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2002-1682

Produtos afetados

Newsreactor