CVE-2007-0889 | BDVDB-2026-22220 Detail

Description#

Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal vulnerability for a remote attack vector.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12007-02-12Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.