CVE

CVE-2002-2162

Severity:

Pending analysis

Type:

Unavailable / Other

Publication date:

31/12/2002

Last modified:

05/09/2008

Description

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

Impact

Vector 2.0

AV:L/AC:L/Au:N/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 4.60 MEDIUM
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

4.60

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:cerulean_studios:trillian:0.73:::::::*
cpe:2.3:a:cerulean_studios:trillian:0.725:::::::*
cpe:2.3:a:cerulean_studios:trillian:0.6351:::::::*

To consult the complete list of CPE names with products and versions, see this page

CVE-2002-2162

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools