PT-2000-1865 · Shambala · Shambala Server

Publicado 2000-12-19 · Atualizado 2017-12-19 · CVE-2000-0954

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Shambala Server version 4.5

Description The issue allows local users to obtain passwords stored in plaintext, potentially compromising the server.

Recommendations For version 4.5, update the password storage mechanism to use a secure method, such as hashing and salting, to protect user passwords.

Exploit

Correção

Identificadores relacionados

CVE-2000-0954

Produtos afetados

Shambala Server

Referências · 4

• 🔥 http://securityfocus.com/bid/1771 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0954 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5346 · Nota