CVEvulnerability
CVE-2002-2384
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.
Affected configurations
• hotfoon corporation hotfoon 4.0
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html Exploit
- http://www.iss.net/security_center/static/10591.php www.iss.net
- http://www.securityfocus.com/bid/6155 www.securityfocus.com
- http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html Exploit
- http://www.iss.net/security_center/static/10591.php www.iss.net
- http://www.securityfocus.com/bid/6155 www.securityfocus.com