PT-2003-1254 · 4D · Web Server 4D

Publicado 2003-04-02 · Atualizado 2008-09-05 · CVE-2002-1521

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Web Server 4D (WS4D) version 3.6

Description The issue allows attackers to gain privileges due to the storage of passwords in plaintext in the Ws4d.4DD file.

Recommendations For Web Server 4D (WS4D) version 3.6, consider encrypting or hashing passwords to prevent them from being stored in plaintext, and restrict access to the Ws4d.4DD file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1521

Produtos afetados

Web Server 4D

Referências · 4

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0128.html · Aviso do Fabricante
• http://securityfocus.com/bid/5803 · Aviso do Fabricante
• http://iss.net/security_center/static/10198.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1521 · Nota de Segurança