CVE-2002-1682

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-326

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securiteam.com/windowsntfocus/5SP0P0K60C.htmlBroken Link, Exploit, Vendor Advisory
http://www.securityfocus.com/bid/3927Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7968Third Party Advisory, VDB Entry
http://www.securiteam.com/windowsntfocus/5SP0P0K60C.htmlBroken Link, Exploit, Vendor Advisory
http://www.securityfocus.com/bid/3927Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7968Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-16834.3Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other user CVE-2002-16845.0Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 al CVE-2002-16854.3Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute CVE-2002-168610.0Buffer overflow in lscfg of unknown versions of AIX has unknown impact.CVE-2002-16872.1Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTI CVE-2002-16885.0The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other user CVE-2002-168910.0Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logg CVE-2002-169010.0Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.CVE-2002-169110.0Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain CVE-2002-16923.6Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long exten CVE-2002-16945.0Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow rem CVE-2002-16955.0Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to m