CVE-2002-2162

2002-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

Percentile

0.4%

JSON

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

Affected configurations

Nvd

Node

cerulean_studiostrillianMatch0.73

cerulean_studiostrillianMatch0.725

cerulean_studiostrillianMatch0.6351

VendorProductVersionCPE
cerulean_studiostrillian0.73cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*
cerulean_studiostrillian0.725cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*
cerulean_studiostrillian0.6351cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cerulean_studios	trillian	0.73	cpe:2.3:a:cerulean_studios:trillian:0.73:::::::*
cerulean_studios	trillian	0.725	cpe:2.3:a:cerulean_studios:trillian:0.725:::::::*
cerulean_studios	trillian	0.6351	cpe:2.3:a:cerulean_studios:trillian:0.6351:::::::*