Lucene search
HistoryMar 14, 2006 - 1:06 a.m.
CVE-2006-1198
comvigo
im lock 2006
encryption
password
registry
bypass
security
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users have Read permission, which allows local users to bypass the product’s blocking functionality by decrypting the password.
Affected configurations
Node
comvigoim_lockMatchhome_2006
ORcomvigoim_lockMatchprofessional_2006
| CPE | Name | Operator | Version |
|---|---|---|---|
| comvigo:im_lock | comvigo im lock | eq | home_2006 |
| comvigo:im_lock | comvigo im lock | eq | professional_2006 |
Related
nvd
nvd
CVE-2006-1198
2006-03-14 01:06:00
cvelist
cvelist
CVE-2006-1198
2006-03-14 01:00:00
prion
prion
Default credentials
2006-03-14 01:06:00
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-1198