CVE-2001-0983

UltraEdit - Weak Encryption of FTP Passwords in uedit32.ini

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0983. PoCs published by E. van Elk.

AI-analyzed exploit summary This VB script decrypts weakly encrypted FTP passwords stored in UltraEdit's uedit32.ini file. It leverages a known master key and a simple bitwise operation to reverse the encryption.

Description

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED
by E. van Elk · textlocalwindows
https://www.exploit-db.com/exploits/21091

This VB script decrypts weakly encrypted FTP passwords stored in UltraEdit's uedit32.ini file. It leverages a known master key and a simple bitwise operation to reverse the encryption.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: UltraEdit (versions storing passwords in uedit32.ini)
No auth needed
Prerequisites: Local access to the system · Presence of uedit32.ini with stored FTP passwords
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Vendor Advisory x_refsource_misc
http://www.eve-software.com/security/ueditpw.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=99861651923668&w=2

Scores

EPSS 0.0044
EPSS Percentile 35.2%

Details

Status published
Products (1)
ultraedit/ultraedit-32
Published Aug 31, 2001
Tracked Since Feb 18, 2026