CVE-2004-0838

Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/12522	Vendor Advisory
http://www.atstake.com/research/advisories/2004/a091304-1.txt	Vendor Advisory
http://www.securityfocus.com/bid/11162	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17342
http://secunia.com/advisories/12522	Vendor Advisory
http://www.atstake.com/research/advisories/2004/a091304-1.txt	Vendor Advisory
http://www.securityfocus.com/bid/11162	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17342

Configurations

Configuration 1 (hide)

cpe:2.3:h:lexar:jumpdrive_secure:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2004-09-13 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-0838

Mitre link : CVE-2004-0838

CVE.ORG link : CVE-2004-0838

JSON object : View

Products Affected

lexar

jumpdrive_secure

CWE

NVD-CWE-Other

{"id": "CVE-2004-0838", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-09-13T04:00:00.000", "references": [{"url": "http://secunia.com/advisories/12522", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.atstake.com/research/advisories/2004/a091304-1.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11162", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17342", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12522", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.atstake.com/research/advisories/2004/a091304-1.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/11162", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17342", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lexar:jumpdrive_secure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B9B72E-1CA2-4265-8ED9-A921495F5F3D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}