CVE-2002-1653 Weak cryptography in n/a
Remote attackers can sniff sensitive data because Cryptcat server mode fails to enable encryption when started with the -e option.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2002-1653?
CVE-2002-1653 is a medium-severity vulnerability in n/a, published on 28 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.
Which versions are affected by CVE-2002-1653?
It affects 1 product.
Products include Farm9 Cryptcat.
How do I fix CVE-2002-1653?
No fix published yet.
Is CVE-2002-1653 being exploited?
There is no known exploitation of CVE-2002-1653 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2002-1653, GHSA-rw3w-c7r4-m22q.