vulnwire
2.1low

CVE-2004-25551 exploit

Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Contro…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 58%
Public exploits
1
Exploit-DB

Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.

Exploit prediction (EPSS)

0.83% probability of exploitation in the next 30 days, higher than 58% of all scored CVEs.

Exploits and detections

  • EDB-24171 SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery · local · 2004-06-05

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • osvdb.org /6735 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16327 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/11790 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/10467 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/fulldisclosure/2004-06/0081.html · mailing-list, x_refsource_FULLDISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.