SnapStream PVS 1.2 - Plaintext Password
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2001-1107 | 15 Mar 200205:00 | – | cve |
 | CVE-2001-1107 | 15 Mar 200205:00 | – | cvelist |
 | EUVD-2001-1088 | 7 Oct 202500:30 | – | euvd |
 | CVE-2001-1107 | 26 Jul 200104:00 | – | nvd |
source: https://www.securityfocus.com/bid/3101/info
Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129.
The PVS service stores passwords and user information in plaintext format. Additional information is also contained in the same file which stores passwords, such as the location of the base directory for the service.
This would normally only be a local issue but in combination with other known vulnerabilities the file which stores passwords and user information is easily obtained.
Due to the issue discussed as Bugtraq ID 3100, the passwords can be disclosed to remote attackers.
http://home.victim.com:8080/../ssd.iniData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.03257