medium4.6
CVE-2000-1148
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plain…
Impact
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Volano Llc | Volanochatpro | Version 2.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0085.html
- http://www.securityfocus.com/bid/1906
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5465
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0085.html
- http://www.securityfocus.com/bid/1906
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5465