Description
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.
References
- 20020603 Security holes in two Teekai's products + security hole in ncmail.netscape.com mailing-list
- 4926 vdb-entry
- teekais-forum-obtain-information(9286) vdb-entry