CVE-2002-1353 | BDVDB-2026-9347 Detail

Description#

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/10948
http://secunia.com/advisories/7740/
http://securitytracker.com/id?1005830
http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false

Exploit#

No public exploit known

History#

Version 12005-04-14Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.