CVE-2000-1173 Weak cryptography in n/a
Attackers can sniff network traffic to obtain sensitive registration data and credit card numbers due to weak or missing encryption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-1173?
CVE-2000-1173 is a medium-severity vulnerability in n/a, published on 19 Dec 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
Which versions are affected by CVE-2000-1173?
It affects 1 product.
Products include Microsys Cyberpatrol.
How do I fix CVE-2000-1173?
No fix has been published for CVE-2000-1173 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-1173 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-1173 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-7rc9-qwrm-pj39.