vulnwire
4.6med

CVE-2001-09831 exploit

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt t…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 38%
Public exploits
1
Exploit-DB

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 38% of all scored CVEs.

Exploits and detections

  • EDB-21091 UltraEdit 8.2 - FTP Client Weak Password Encryption · local · 2001-08-23

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • eve-software.com /security/ueditpw.html · x_refsource_MISC, x_transferred
  • marc.info /?l=bugtraq&m=99861651923668&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.