Unscored CVE-2003-1392 EUVD-2003-1382GHSA-2gfg-p5mp-gf94

CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphras…

Published Oct 19, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data.

References

cryptobuddy-password-information-disclosure(11317) vdb-entry
6812 vdb-entry
20030210 RTS CryptoBuddy Multiple Encryption Implementation Vulnerabilities mailing-list