CVE-2002-2058

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.

Ссылки

http://online.securityfocus.com/archive/82/275246
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9286.php
Broken Link
http://www.securityfocus.com/bid/4926
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://online.securityfocus.com/archive/82/275246
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9286.php
Broken Link
http://www.securityfocus.com/bid/4926
Broken Link
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:teekai:tracking_online:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00249

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-327

Связанные уязвимости

GHSA-mfw4-8493-mm36