CVE-2001-0983 UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
MediumCVSS 4.6
EPSS 0.44%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultraedit-32 | All versions | No fix listed |
References
- 20010823 Re: Respondus v1.1.2 stores passwords using weak encryption mailing-list
- www.eve-software.com exploit vendor-advisory