CVE-2004-2555
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography ...
CVE-2004-2555 is a low vulnerability (CVSS 2.1) in Smartstuff Foolproof Security, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 58th percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.83%EPSS, 58th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery | 2004-06-05 |
What each source reports
NVD Score used
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
- Record
CVE-2004-2555- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
- Record
CVE-2004-2555- Updated
- 2026-11-02
EUVDEUVD-2004-2546No score
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
- Record
EUVD-2004-2546- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p5f-vq8j-gwq7No score
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography ...
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
- Record
GHSA-6p5f-vq8j-gwq7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.