Unscored severity · published Dec 31, 2002
CVE-2002-2384
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone…
–
CVSS
0.4%
EPSS
No
On KEV
Description
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HO
Hotfoon · Hotfoon Corporation
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2384
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2384
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html
www.iss.net
http://www.iss.net/security_center/static/10591.php
www.securityfocus.com
http://www.securityfocus.com/bid/6155
More from Hotfoon
–
CVE-2002-2385
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice…