CVE-2001-1003: Weak Encryption

Published Aug 31, 2001

Updated

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.

Affected Software

1 affected component

WebCT Respondus=1.1.2

Event History

Aug 31, 2001

CVE Published

04:00 AM

Feb 2, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1003?

CVE-2001-1003 is rated as a high severity vulnerability due to the weak encryption used, which can lead to unauthorized access.

How do I fix CVE-2001-1003?

To fix CVE-2001-1003, upgrade to a version of Respondus that uses stronger encryption methods for storing credentials.

What are the risks associated with CVE-2001-1003?

The risks include unauthorized access to sensitive information and potential escalation of privileges for local users.

Who is affected by CVE-2001-1003?

Users of Respondus 1.1.2 for WebCT are affected by CVE-2001-1003 due to its insecure handling of usernames and passwords.

Is there any workaround for CVE-2001-1003?

There are no recommended workarounds for CVE-2001-1003; upgrading to a secure version is the best course of action.