CVE-2007-2023

Published: Apr 13, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.

Affected (1)

Products: Secustick: Secustick Usb Flash Drive

Secustick

1 product

Secustick Usb Flash Drive

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Secustick Secustick Usb Flash Drive	All versions

References (6)

http://osvdb.org/41592

Source: cve@mitre.org

http://tweakers.net/reviews/682

Source: cve@mitre.org

http://tweakers.net/reviews/683

Source: cve@mitre.org

http://osvdb.org/41592

Source: af854a3a-2127-422b-91ae-364da2661108

http://tweakers.net/reviews/682

Source: af854a3a-2127-422b-91ae-364da2661108

http://tweakers.net/reviews/683

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.