PT-2001-2571 · Imatix · Xitami

CVE-2001-1481 · Publicado 2001-12-31 · Atualizado 2024-02-13

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xitami versions 2.4 through 2.5 b4

Description The issue allows remote attackers to gain privileges due to the storage of the Administrator password in plaintext in the default.aut file. The default permissions of this file are world-readable, which exacerbates the problem.

Recommendations For Xitami versions 2.4 through 2.5 b4, consider restricting access to the default.aut file to prevent unauthorized reading of the Administrator password. As a temporary workaround, change the permissions of the default.aut file to prevent world-readable access until a more permanent solution is available. Restrict access to the Administrator account to minimize the risk of exploitation.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2001-1481

Produtos afetados

Xitami

Referências · 7

• 🔥 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html · Exploit
• http://securityfocus.com/archive/1/242375 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1481 · Nota de Segurança
• http://securityfocus.com/bid/3582 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1481 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7600 · Nota
• https://t.me/cvenotify/71238 · Publicação no Telegram