CVE-2002-2162 json
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, w…
published 2002-12-31 23 y ago modified 2026-06-16 4 mo ago also EUVD-2002-2141
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 55%
- public exploits
- 1
- Exploit-DB
Summary
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
Timeline
- First public exploit (EDB-21781)
- Published
Exploit prediction
0.77% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-21781 Trillian Instant Messaging 0.x - Credential Encryption local, 2002-09-09
- securityfocus.com http://www.securityfocus.com/bid/5677 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/5677
vdb-entry, exploit
-
securityfocus.com
/archive/1/291071
mailing-list
-
iss.net
/security_center/static/10092.php
vdb-entry
Sources
- CVE List CVE-2002-2162
- NVD CVE-2002-2162
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.