CVE-2003-1392
Current Description
CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data.
Basic Data
Published | December 31, 2003 |
---|---|
Last Modified | July 29, 2017 |
Assigner | cve@mitre.org |
Data Type | CVE |
Data Format | MITRE |
Data Version | 4.0 |
Problem Type | CWE-310 |
CVE Data Version | 4.0 |
Base Metric V2
CVSS 2 - Version | 2.0 |
---|---|
CVSS 2 - Vector String | AV:L/AC:L/Au:N/C:C/I:C/A:N |
CVSS 2 - Access Vector | LOCAL |
CVSS 2 - Access Complexity | LOW |
CVSS 2 - Authentication | NONE |
CVSS 2 - Confidentiality Impact | COMPLETE |
CVSS 2 - Availability Impact | NONE |
CVSS 2 - Base Score | 6.6 |
Severity | MEDIUM |
Exploitability Score | 3.9 |
Impact Score | 9.2 |
Obtain All Privilege | false |
Obtain User Privilege | false |
Obtain Other Privilege | false |
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 Application Research Triangle Software Cryptobuddy 1.0 * * * * * * *