TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.
The product uses a broken or risky cryptographic algorithm or protocol.
Link | Tags |
---|---|
http://online.securityfocus.com/archive/82/275246 | mailing list vdb entry third party advisory broken link |
http://www.securityfocus.com/bid/4926 | exploit vdb entry third party advisory broken link |
http://www.iss.net/security_center/static/9286.php | vdb entry broken link |