CVE-2002-2058

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Weaknesses

CWE-327

Affected products

• Tracking Online (Teekai)

References

• http://online.securityfocus.com/archive/82/275246
• http://www.iss.net/security_center/static/9286.php
• http://www.securityfocus.com/bid/4926