Lucene search

[email protected]CVE-2004-1861

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1861

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1861

invision netsupport school pro

weak encryption algorithm

password security

local users

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.9%

JSON

Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords.

Affected configurations

NVD

Node

netsupportnetsupport_schoolMatch7.0

netsupportnetsupport_schoolMatch7.0_1

netsupportnetsupport_schoolMatch7.5

CPENameOperatorVersion
netsupport:netsupport_schoolnetsupport netsupport schooleq7.0
netsupport:netsupport_schoolnetsupport netsupport schooleq7.0_1
netsupport:netsupport_schoolnetsupport netsupport schooleq7.5

CPE	Name	Operator	Version
netsupport:netsupport_school	netsupport netsupport school	eq	7.0
netsupport:netsupport_school	netsupport netsupport school	eq	7.0_1
netsupport:netsupport_school	netsupport netsupport school	eq	7.5

References

marc.info/?l=bugtraq&m=108032304932321&w=2

www.securityfocus.com/bid/9981

exchange.xforce.ibmcloud.com/vulnerabilities/15621

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.9%

JSON

Related for CVE-2004-1861

cvelist1 nvd1