![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.51674 |
Category: | General |
Title: | Abyss Web Server plaintext password storage |
Summary: | NOSUMMARY |
Description: | Description: The Aprelium Abyss Web Server prior to version 1.0.3 stored the administrative console password in plaintext in the abyss.conf file, allowing local users to see the password and gain additional priviledges. Solution: upgrade to 1.0.3 or later at http://www.aprelium.com This test may be a false positive - we only checked to see if you were running Version 1.* of the server. If you are running version 1.0.3 or later, you are immune to this vulnerability. Risk factor : High CVSS Score: 7.2 |
Cross-Ref: |
BugTraq ID: 4467 Common Vulnerability Exposure (CVE) ID: CVE-2002-0544 http://www.securityfocus.com/bid/4467 |
Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |