Lucene search
MitreCVE-2000-0762HistoryJan 22, 2001 - 5:00 a.m.
CVE-2000-0762
2001-01-2205:00:00
mitre
web.nvd.nist.gov
38
2
etrust access control
default encryption key
spoofing
privileges
remote attackers
cve-2000-0762.
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.032
Percentile
91.2%
The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges.
Affected configurations
Node
broadcometrust_access_controlMatch4.1
ORbroadcometrust_access_controlMatch5.0
ORcaetrust_access_controlMatch4.1sp1
ORcaetrust_access_controlMatch5.0sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| broadcom | etrust_access_control | 4.1 | cpe:2.3:a:broadcom:etrust_access_control:4.1:*:*:*:*:*:*:* |
| broadcom | etrust_access_control | 5.0 | cpe:2.3:a:broadcom:etrust_access_control:5.0:*:*:*:*:*:*:* |
| ca | etrust_access_control | 4.1 | cpe:2.3:a:ca:etrust_access_control:4.1:sp1:*:*:*:*:*:* |
| ca | etrust_access_control | 5.0 | cpe:2.3:a:ca:etrust_access_control:5.0:sp1:*:*:*:*:*:* |
References
Social References
More
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.032
Percentile
91.2%
Related for CVE-2000-0762