Lucene search

K
cveMitreCVE-2001-1003
HistoryFeb 02, 2002 - 5:00 a.m.

CVE-2001-1003

2002-02-0205:00:00
mitre
web.nvd.nist.gov
32
cve-2001-1003
respondus
webct
weak encryption
local user
additional privileges
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

0.4%

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.

Affected configurations

Nvd
Node
webctrespondusMatch1.1.2
VendorProductVersionCPE
webctrespondus1.1.2cpe:2.3:a:webct:respondus:1.1.2:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

0.4%

Related for CVE-2001-1003