Strix
26.1K

CVE-2007-0889

UnknownEPSS 0.25%

Last modified

CVE-2007-0889 is a vulnerability of currently unknown severity. Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal vulnerability for a remote attack vector.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.

Description

Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal vulnerability for a remote attack vector.

Metrics

EPSS Probability
0.25%

16.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Kiwi EnterprisesKiwi CattoolsAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2007-0889?
Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal vulnerability for a remote attack vector.
How severe is CVE-2007-0889?
Severity scoring for CVE-2007-0889 is pending analysis. The EPSS model estimates a 0.25% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0889?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0889?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST