CVE-2002-2389

The CVE-2002-2389 entry concerns TheServer 1.74 web server. The vulnerability arises from storing server.ini under the web document root with insufficient access control, enabling remote attackers to read cleartext passwords and access server log files. This is corroborated by multiple connected ...