CVEvulnerability
CVE-2001-0983
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
Affected configurations
• ultraedit ultraedit-32
References
- http://marc.info/?l=bugtraq&m=99861651923668&w=2 marc.info
- http://www.eve-software.com/security/ueditpw.html Exploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=99861651923668&w=2 marc.info
- http://www.eve-software.com/security/ueditpw.html Exploit, Vendor Advisory