CVE-2000-0559

Description

eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.

Affected products

• Broadcom / etrust_intrusion_detection1.4.1.13

Exploits & proofs of concept

• exploit-dbComputer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryptionby Phate.net

References

• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net
• MISChttp://www.securityfocus.com/bid/1341