CVE-2002-1653 Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote....
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| farm9 cryptcat | = 1.10 | No fix listed |
| debian/cryptcat(Debian:11) | < 20031202-2 | 20031202-2 |
References
- VU#165099 third-party-advisory us-government-resource
- 8431 patch vdb-entry
- cryptcat-e-no-encryption(10618) vdb-entry
- security-tracker.debian.org vendor-advisory