UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
References
Link | Resource |
---|---|
http://www.eve-software.com/security/ueditpw.html | Exploit Vendor Advisory |
http://marc.info/?l=bugtraq&m=99861651923668&w=2 |
Configurations
Information
Published : 2001-08-30 21:00
Updated : 2016-10-17 19:14
NVD link : CVE-2001-0983
Mitre link : CVE-2001-0983
JSON object : View
CWE
Products Affected
ultraedit
- ultraedit-32