Lucene search
HistoryApr 01, 2002 - 5:00 a.m.
CVE-2001-1165
cve-2001-1165
intego fileguard 4.0
weak encryption
user information
passwords
local users
privileges
disengage tool
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
Affected configurations
Node
integodiskguardMatch2.0
ORintegofileguardMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| intego:diskguard | intego diskguard | eq | 2.0 |
| intego:fileguard | intego fileguard | eq | 4.0 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2001-1165