TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.
References
Configurations
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=vuln-dev&m=102313697923798&w=2 - | |
References | () http://www.ifrance.com/kitetoua/tuto/Teekai.txt - Exploit | |
References | () http://www.iss.net/security_center/static/9286.php - | |
References | () http://www.securityfocus.com/bid/4926 - Exploit |
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-2057
Mitre link : CVE-2002-2057
CVE.ORG link : CVE-2002-2057
JSON object : View
Products Affected
teekai
- teekai_forum
CWE