CVE-2000-0559 eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
LowCVSS 2.1
EPSS 0.51%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom etrust intrusion detection | <= 1.4.1.13 | No fix listed |
References
- 1341 exploit patch vdb-entry vendor-advisory
- 20000607 SessionWall-3 Paper + (links to) code mailing-list