CVE-2000-0559

LowCVSS 2.1/10Last modified Nov 11, 2026

Description

eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1341Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net
http://www.securityfocus.com/bid/1341Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net

Timeline

Published: Jun 7, 2000
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05617.5Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.CVE-2000-05627.5BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting CVE-2000-056310.0The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w CVE-2000-05645.0The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a CVE-2000-05652.1SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. CVE-2000-05667.2makewhatis in Linux man package allows local users to overwrite files via a symlink attack.CVE-2000-05675.0Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e CVE-2000-05685.0Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to mo CVE-2000-05695.0Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.CVE-2000-05705.0FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an CVE-2000-05716.4LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.CVE-2000-05724.6The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.