PT-2001-2571 · Imatix · Xitami

Published 2001-12-31 · Updated 2024-02-13 · CVE-2001-1481

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xitami versions 2.4 through 2.5 b4

Description The issue allows remote attackers to gain privileges due to the storage of the Administrator password in plaintext in the default.aut file. The default permissions of this file are world-readable, which exacerbates the problem.

Recommendations For Xitami versions 2.4 through 2.5 b4, consider restricting access to the default.aut file to prevent unauthorized reading of the Administrator password. As a temporary workaround, change the permissions of the default.aut file to prevent world-readable access until a more permanent solution is available. Restrict access to the Administrator account to minimize the risk of exploitation.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2001-1481

Affected Products

Xitami

References · 7

• 🔥 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1481 · Security Note
• http://securityfocus.com/archive/1/242375 · Note
• http://securityfocus.com/bid/3582 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1481 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7600 · Note
• https://t.me/cvenotify/71238 · Telegram Post