CVE-2000-1148
- State
- Published
- Severity
- Not scored
- Published
- Jan 22, 2001
- Updated
- Aug 8, 2024
- Reserved
- Dec 14, 2000
Description
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20001104 Filesystem Access + VolanoChat = VChat admin (fwd)mailing-list
- 1906vdb-entry
- volanochatpro-plaintext-password(5465)vdb-entry
- 20001106 Re: FW: Filesystem Access + VolanoChat = VChat admin (fwd)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.