CVE-2004-2172

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.

Affected (1)

Products: Netsourcecommerce: Productcart

Netsourcecommerce

1 product

Productcart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netsourcecommerce Productcart	Before 2.53

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (20)

http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/10898

Source: cve@mitre.org

Broken Link

http://securitytracker.com/alerts/2004/Feb/1009085.html

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt

Source: cve@mitre.org

ExploitThird Party Advisory

http://www.osvdb.org/3979

Source: cve@mitre.org

Broken Link

http://www.s-quadra.com/advisories/Adv-20040216.txt

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/archive/1/354288

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB EntryVendor Advisory

http://www.securityfocus.com/bid/9669

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/15231

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html