CVE-2004-2555

Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html	Exploit
http://secunia.com/advisories/11790
http://www.osvdb.org/6735	Exploit
http://www.securityfocus.com/bid/10467	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16327
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html	Exploit
http://secunia.com/advisories/11790
http://www.osvdb.org/6735	Exploit
http://www.securityfocus.com/bid/10467	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16327

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:smartstuff:foolproof_security:3.9:::::::*
	cpe:2.3:a:smartstuff:foolproof_security:3.9.4:::::::*
	cpe:2.3:a:smartstuff:foolproof_security:3.9.7:::::::*

History

20 Nov 2024, 23:53

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html - Exploit~~	() http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html - Exploit
References	~~() http://secunia.com/advisories/11790 -~~	() http://secunia.com/advisories/11790 -
References	~~() http://www.osvdb.org/6735 - Exploit~~	() http://www.osvdb.org/6735 - Exploit
References	~~() http://www.securityfocus.com/bid/10467 - Exploit~~	() http://www.securityfocus.com/bid/10467 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16327 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16327 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:53

NVD link : CVE-2004-2555

Mitre link : CVE-2004-2555

CVE.ORG link : CVE-2004-2555

JSON object : View

Products Affected

smartstuff

foolproof_security

CWE

NVD-CWE-Other

{"id": "CVE-2004-2555", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/11790", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/6735", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10467", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16327", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/11790", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/6735", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10467", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16327", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key."}], "lastModified": "2024-11-20T23:53:39.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:smartstuff:foolproof_security:3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE9228B7-CB6D-4EC7-8BC2-DCFA0C6C7D71"}, {"criteria": "cpe:2.3:a:smartstuff:foolproof_security:3.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52815596-EC52-4125-9277-8783630CF6B9"}, {"criteria": "cpe:2.3:a:smartstuff:foolproof_security:3.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "841F31BD-8F6E-4865-A1B6-3E0283899666"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}