PT-2000-1865 · Shambala · Shambala Server

Published 2000-12-19 · Updated 2017-12-19 · CVE-2000-0954

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Shambala Server version 4.5

Description The issue allows local users to obtain passwords stored in plaintext, potentially compromising the server.

Recommendations For version 4.5, update the password storage mechanism to use a secure method, such as hashing and salting, to protect user passwords.

Exploit

Fix

Related Identifiers

CVE-2000-0954

Affected Products

Shambala Server

References · 4

• 🔥 http://securityfocus.com/bid/1771 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0954 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5346 · Note