CVE-2002-2384: Hotfoon Corporation Hotfoon

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.

Affected products

• Hotfoon Corporation Hotfoon: version 4.0 only

Published 2002-12-31. Last modified 2026-06-16.