Vulnerability Details CVE-2001-1481
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html
- http://www.securityfocus.com/archive/1/242375
- http://www.securityfocus.com/bid/3582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7600
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html
- http://www.securityfocus.com/archive/1/242375
- http://www.securityfocus.com/bid/3582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7600