CVE-2002-1353 LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intranet-server localweb2000 | = 2.1.0 | No fix listed |
References
- 7740 third-party-advisory
- 1005830 vdb-entry
- 20021216 LocalWEB 2000 Insecure Password Storage third-party-advisory
- localweb2k-userslst-plaintext-passwords(10948) vdb-entry