First published: Tue Jan 09 2001(Updated: )
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Network Associates Sniffer Agent | =3.0.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-1158 is considered a high severity vulnerability due to the ease of decrypting sensitive credentials.
To fix CVE-2000-1158, it is recommended to upgrade to a more secure version of the NAI Sniffer Agent that uses stronger authentication methods.
CVE-2000-1158 specifically affects Network Associates Sniffer Agent version 3.0.10.
CVE-2000-1158 allows attackers to easily sniff the network traffic and obtain plain text usernames and passwords, compromising security.
A workaround for CVE-2000-1158 includes implementing network encryption to obscure authentication data during transmission.