Vulnerabilities > Research Triangle Software

DATE CVE VULNERABILITY TITLE RISK
2003-12-31 CVE-2003-1392 Cryptographic Issues vulnerability in multiple products
CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data.
6.6
2003-12-31 CVE-2003-1391 Cryptographic Issues vulnerability in Research Triangle Software Cryptobuddy 1.0/1.2
RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase.
network
low complexity
research-triangle-software CWE-310
7.5
2003-12-31 CVE-2003-1390 Cryptographic Issues vulnerability in Research Triangle Software Cryptobuddy 1.0/1.2
RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.
network
low complexity
research-triangle-software CWE-310
7.5
2003-12-31 CVE-2003-1389 Cryptographic Issues vulnerability in Research Triangle Software Cryptobuddy 1.0/1.2
RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks.
network
low complexity
research-triangle-software CWE-310
7.5