7.2
CVSSv2

CVE-2002-0544

Published: 03/07/2002 Updated: 05/09/2008
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Aprelium Abyss Web Server (abyssws) prior to 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.

Vulnerable Product Search on Vulmon Subscribe to Product

aprelium technologies abyss web server 1.0

Exploits

source: wwwsecurityfocuscom/bid/4466/info Abyss Web Server is a freely available personal web server It is maintained by Aprelium Technologies and runs on Microsoft Windows operating systems, as well as Linux It is possible for a remote attacker to disclose the contents of arbitrary web-readable files by making a specially crafted web ...