Lucene search

K
cveMitreCVE-2000-0300
HistoryApr 26, 2000 - 4:00 a.m.

CVE-2000-0300

2000-04-2604:00:00
mitre
web.nvd.nist.gov
34
cve-2000-0300
pcanywhere 9.x
weak encryption
remote attackers
decrypt
domain accounts

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.008

Percentile

82.1%

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.

Affected configurations

Nvd
Node
symantecpcanywhereMatch9.0
VendorProductVersionCPE
symantecpcanywhere9.0cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.008

Percentile

82.1%

Related for CVE-2000-0300