{"id": "CVE-2002-0344", "bulletinFamily": "NVD", "title": "CVE-2002-0344", "description": "Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.", "published": "2002-06-25T00:00:00", "modified": "2016-10-17T22:19:33", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2002-0344", "reporter": "NVD", "references": ["http://marc.info/?l=bugtraq&m=101496301307285&w=2", "http://marc.info/?l=bugtraq&m=101466781122312&w=2", "http://www.securityfocus.com/bid/4170", "http://www.iss.net/security_center/static/8282.php"], "cvelist": ["CVE-2002-0344"], "type": "cve", "lastseen": "2017-04-18T15:49:39", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:symantec:liveupdate:1.5"], "cvelist": ["CVE-2002-0344"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "description": "Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.", "edition": 1, "hash": "98acf10a62b46d9a623bbaf3de88b4e0d6a0e018dd4df83acac6b00c8cea2ee9", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "5f30195f0b1a24ce0f50647edca3fdb6", "key": "description"}, {"hash": "308f7ea443e6a125f212ac2ca47b420e", "key": "href"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "0a0c3f0a733eec851c16b68acbaf2c7a", "key": "modified"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "26769fd423968d45be7383413e2552f1", "key": "cvss"}, {"hash": "4dbde033ad20a64d6e79f0f5cfad39e3", "key": "references"}, {"hash": "977d07807a01b2a33812534590f97720", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "6c16c1212624e64bb390f1308a49ff66", "key": "cvelist"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "cdb52313590d18d33a3b4b4bfa5d9cbf", "key": "cpe"}, {"hash": "8629189e12a11785af63f24b2a9faca0", "key": "published"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2002-0344", "id": "CVE-2002-0344", "lastseen": "2016-09-03T03:20:34", "modified": "2008-09-05T16:27:47", "objectVersion": "1.2", "published": "2002-06-25T00:00:00", "references": ["http://marc.theaimsgroup.com/?l=bugtraq&m=101466781122312&w=2", "http://marc.theaimsgroup.com/?l=bugtraq&m=101496301307285&w=2", "http://www.securityfocus.com/bid/4170", "http://www.iss.net/security_center/static/8282.php"], "reporter": "NVD", "scanner": [], "title": "CVE-2002-0344", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T03:20:34"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "cdb52313590d18d33a3b4b4bfa5d9cbf"}, {"key": "cvelist", "hash": "6c16c1212624e64bb390f1308a49ff66"}, {"key": "cvss", "hash": "26769fd423968d45be7383413e2552f1"}, {"key": "description", "hash": "5f30195f0b1a24ce0f50647edca3fdb6"}, {"key": "href", "hash": "308f7ea443e6a125f212ac2ca47b420e"}, {"key": "modified", "hash": "7369d6c853e79fecb9495ee125f8a866"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "8629189e12a11785af63f24b2a9faca0"}, {"key": "references", "hash": "8e8091dcecbb5974beea151591a93713"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "977d07807a01b2a33812534590f97720"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "e9f617a70934e70952ef3456afe020bb1334a05d72cd7d1b49d1156443ca5265", "viewCount": 1, "objectVersion": "1.2", "cpe": ["cpe:/a:symantec:liveupdate:1.5"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": [], "enchantments": {"score": {"value": 5.0, "vector": "NONE", "modified": "2017-04-18T15:49:39"}, "vulnersScore": 5.0}}

{"osvdb": [{"lastseen": "2017-04-28T13:19:59", "references": [], "edition": 1, "description": "## Vulnerability Description\nSymantec LiveUpdate contains a flaw that may lead to an unauthorized password exposure. The problem is that LiveUpdate stores usernames and passwords for a local LiveUpdate server in plaintext in the registry, which may lead to a loss of confidentiality.\n## Solution Description\nUpgrade to version 1.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSymantec LiveUpdate contains a flaw that may lead to an unauthorized password exposure. The problem is that LiveUpdate stores usernames and passwords for a local LiveUpdate server in plaintext in the registry, which may lead to a loss of confidentiality.\n## References:\nVendor URL: http://enterprisesecurity.symantec.com/products/products.cfm?ProductID=155\nVendor Specific Solution URL: http://www.symantec.com/techsupp/files/lu/lu.html\n[Vendor Specific Advisory URL](http://securityresponse.symantec.com/avcenter/security/Content/2002.02.28a.html)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2002-02/0276.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2002-02/0355.html\nISS X-Force ID: 8282\n[CVE-2002-0344](https://vulners.com/cve/CVE-2002-0344)\nBugtraq ID: 4170\n", "reporter": "Javier Sanchez(jsanchez157@hotmail.com)", "published": "2002-02-25T11:14:50", "type": "osvdb", "title": "Symantec LiveUpdate Password Exposure", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "LiveUpdate", "version": "1.5", "operator": "eq"}], "cvelist": ["CVE-2002-0344"], "modified": "2002-02-25T11:14:50", "href": "https://vulners.com/osvdb/OSVDB:4710", "id": "OSVDB:4710", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}]}