CVE-2001-1107 SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snapstream pvs | = 1.2a | No fix listed |
References
- 20010726 Snapstream PVS vulnerability mailing-list vendor-advisory
- discuss.snapstream.com
- 3101 exploit vdb-entry vendor-advisory
- snapstream-dot-directory-traversal(6917) vdb-entry