CVE: CVE-2002-1653 - CVE-Search

CVE Details for CVE: CVE-2002-1653

Summary

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.

Timestamps
Last major update	11-07-2017 - 01:29
Published	31-12-2002 - 05:00
Last modified	11-07-2017 - 01:29

References

http://www.kb.cert.org/vuls/id/165099
http://www.securityfocus.com/bid/8431
https://exchange.xforce.ibmcloud.com/vulnerabilities/10618

Vulnerable Configurations

cpe:2.3:a:farm9:cryptcat:1.10:*:*:*:*:*:*:*
cpe:2.3:a:farm9:cryptcat:1.10:*:*:*:*:*:*:*

CAPEC

Click the CAPEC title to display a description

CWE

NVD-CWE-Other

CVSS

Base

5.0

Impact

2.9

Exploitability

10.0

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

CVSS3

None

VIA4 references

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	8431
cert-vn	VU#165099
xf	cryptcat-e-no-encryption(10618)