low2.1Public exploit code
CVE-2000-0559
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local use…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption2000-06-07 · local · windows · Verified
Impact
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Etrust Intrusion Detection | through 1.4.1.13 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/1341
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net
- http://www.securityfocus.com/bid/1341
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net