CVE-2007-0889 - CVE House
Back to Database
Status published Medium CVE-2007-0889

Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding")...

Vulnerability Description

Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal vulnerability for a remote attack vector.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0889

Credits & Attribution

No credits recorded in the NVD database.

References

More from kiwi enterprises

View All →
CVE-2007-0888
Directory traversal vulnerability in the TFTP server in Kiwi CatTools...
Critical 10

Affected Vendor

kiwi enterprises

View all reports →

Affected Software

kiwi cattools
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 12th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.