CVE-1999-1049

ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

1999-02-21

Last modified

2024-08-01

Affected products

• Arcserve Backup (Broadcom)

References

• http://marc.info/?l=bugtraq&m=91972006211238&w=2