Vulnerability Description
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ultraedit | Ultraedit-32 | All versions |
References
- http://marc.info/?l=bugtraq&m=99861651923668&w=2
- http://www.eve-software.com/security/ueditpw.htmlExploitVendor Advisory
- http://marc.info/?l=bugtraq&m=99861651923668&w=2
- http://www.eve-software.com/security/ueditpw.htmlExploitVendor Advisory
FAQ
What is CVE-2001-0983?
CVE-2001-0983 is a vulnerability with a CVSS score of 4.6 (MEDIUM). UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
How severe is CVE-2001-0983?
CVE-2001-0983 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-0983?
Check the references section above for vendor advisories and patch information. Affected products include: Ultraedit Ultraedit-32.