Lucene search

K
cve[email protected]CVE-2004-1497
HistoryFeb 19, 2005 - 5:00 a.m.

CVE-2004-1497

2005-02-1905:00:00
web.nvd.nist.gov
26
cve-2004-1497
web forums server
plaintext passwords
local privilege escalation
nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.

Affected configurations

NVD
Node
minihttpserver.netweb_forums_serverMatch1.6
OR
minihttpserver.netweb_forums_serverMatch2.0_power_pack

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2004-1497