CVE-2001-1165

MediumCVSS 4.6/10Last modified Nov 12, 2026

Description

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.iss.net/security_center/static/7018.phpVendor Advisory
http://www.securemac.com/fileguard.php#disengage
http://www.securityfocus.com/bid/3213Exploit, Vendor Advisory
http://www.iss.net/security_center/static/7018.phpVendor Advisory
http://www.securemac.com/fileguard.php#disengage
http://www.securityfocus.com/bid/3213Exploit, Vendor Advisory

Timeline

Published: Apr 1, 2002
Last modified: Nov 12, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11665.0linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a CVE-2001-11685.0Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (mo CVE-2001-11697.5keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privile CVE-2001-11705.0AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal a CVE-2001-11717.2Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, w CVE-2001-11724.6OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file CVE-2001-11737.2Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.CVE-2001-11747.5Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.CVE-2001-11757.2vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users CVE-2001-11767.5Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary co CVE-2001-11776.2ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary fi CVE-2001-11787.2Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.