Vulnerability in Farm9 Cryptcat

CVE-2002-1653

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

Affected products

Farm9 Cryptcat — versions 1.10
N/a — versions n/a

References

cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)