PT-2001-1965 · Igss · Air Messenger Lan Server

Publicado 2001-10-12 · Atualizado 2008-09-05 · CVE-2001-0786

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Air Messenger LAN Server version 3.4.2

Description The issue concerns the storage of user passwords in plaintext. Specifically, the passwords are stored in the pUser.Dat file.

Recommendations For version 3.4.2, consider implementing additional security measures to protect user passwords, such as encrypting the pUser.Dat file or using alternative secure storage methods. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0786

Produtos afetados

Air Messenger Lan Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-0786 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html · Nota
• http://securityfocus.com/bid/2882 · Aviso do Fabricante