medium4.6Public exploit code
CVE-2002-2162
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trillian Instant Messaging 0.x - Credential Encryption2002-09-09 · local · windows · Verified
Impact
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerulean Studios | Trillian | Versions 0.73, 0.725, 0.6351 |