vulnwire
4.6med

CVE-2002-21621 exploit

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, w…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
1
Exploit-DB

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

Exploit prediction (EPSS)

0.77% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

  • EDB-21781 Trillian Instant Messaging 0.x - Credential Encryption · local · 2002-09-09

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • securityfocus.com /archive/1/291071 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/10092.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/5677 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.