Lucene search
MitreCVE-2002-2162HistoryNov 16, 2005 - 9:17 p.m.
CVE-2002-2162
2005-11-1621:17:00
mitre
web.nvd.nist.gov
35
cerulean studios
trillian
weak encryption
user passwords
local access
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
0.4%
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
Affected configurations
Node
cerulean_studiostrillianMatch0.73
ORcerulean_studiostrillianMatch0.725
ORcerulean_studiostrillianMatch0.6351
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cerulean_studios | trillian | 0.73 | cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:* |
| cerulean_studios | trillian | 0.725 | cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:* |
| cerulean_studios | trillian | 0.6351 | cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Trillian Instant Messaging 0.x - Credential Encryption
2002-09-09 00:00:00
openvas
openvas
Trillian is installed
2005-11-03 00:00:00
Trillian is installed
2005-11-03 00:00:00
cvelist
cvelist
CVE-2002-2162
2005-11-16 21:17:00
nvd
nvd
CVE-2002-2162
2002-12-31 05:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
0.4%
Related for CVE-2002-2162