CVE-2004-2555 Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local....
LowCVSS 2.1
EPSS 0.83%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smartstuff foolproof security | = 3.9 | No fix listed |
| smartstuff foolproof security | = 3.9.4 | No fix listed |
| smartstuff foolproof security | = 3.9.7 | No fix listed |
References
- 20040604 [CYSA-0329] Password recovery vulnerability in FoolProof Security 3.9.x for Windows 95/9 exploit mailing-list
- 11790 third-party-advisory
- 6735 exploit vdb-entry
- 10467 exploit vdb-entry
- foolproof-admin-password-recovery(16327) vdb-entry