CVE-2000-0492

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1300
http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1300

Timeline

Published: Jun 4, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-049310.0Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrar CVE-2000-04947.2Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which i CVE-2000-04955.0Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Med CVE-2000-04977.5IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extensio CVE-2000-04987.5Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension i CVE-2000-04997.5The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a CVE-2000-05005.0The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with CVE-2000-05012.6Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting CVE-2000-05022.1Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows l CVE-2000-05032.6The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the N CVE-2000-05045.0libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP CVE-2000-05055.0The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large