CVE-2002-2162: Medium severity Cerulean Studios Trillian vulnerability
Published Dec 31, 2002
·Updated
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
Affected Software
3 affected components
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=0.725
Cerulean Studios Trillian=0.6351
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Nov 16, 2005
CVE Published
via MITRE·09:17 PM
Data Sourced
via MITRE·09:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2162?
CVE-2002-2162 is considered a medium severity vulnerability due to the potential exposure of user passwords.
2
How do I fix CVE-2002-2162?
To fix CVE-2002-2162, upgrade to a later version of Trillian that does not use weak encryption for password storage.
3
Who is affected by CVE-2002-2162?
Users of Cerulean Studios Trillian versions 0.73 and earlier are affected by CVE-2002-2162.
4
What type of vulnerability is CVE-2002-2162?
CVE-2002-2162 is a local security vulnerability related to weak encryption methods used for password storage.
5
Can CVE-2002-2162 be exploited remotely?
No, CVE-2002-2162 can only be exploited by local users with access to the affected machine.