CVE-2000-0625

NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2000-07-18

Last modified

2024-08-08

Affected products

• Zeroport (Netzero)

References

• http://www.l0pht.com/advisories/netzero.txt
• http://www.securityfocus.com/bid/1483