4.6med

CVE-2001-11651 exploit

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decryptin…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 42%
Public exploits
1
Exploit-DB

Summary

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.

Exploit prediction (EPSS)

0.49% probability of exploitation in the next 30 days, higher than 42% of all scored CVEs.

Exploits and detections

  • EDB-21076 Intego FileGuard 2.0/4.0 - Weak Password Encryption · local · 2001-08-20

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • securityfocus.com /bid/3213 · vdb-entry, x_refsource_BID, x_transferred
  • securemac.com /fileguard.php#disengage · x_refsource_MISC, x_transferred
  • iss.net /security_center/static/7018.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.