CVE-2002-1353

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
Configurations

Configuration 1 (hide)

cpe:2.3:a:intranet-server:localweb2000:2.1.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:41

Type Values Removed Values Added
References () http://secunia.com/advisories/7740/ - () http://secunia.com/advisories/7740/ -
References () http://securitytracker.com/id?1005830 - () http://securitytracker.com/id?1005830 -
References () http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false - () http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/10948 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/10948 -

Information

Published : 2002-08-29 04:00

Updated : 2025-04-03 01:03


NVD link : CVE-2002-1353

Mitre link : CVE-2002-1353

CVE.ORG link : CVE-2002-1353


JSON object : View

Products Affected

intranet-server

  • localweb2000