Vulnerabilities > CVE-2000-1148 - Unspecified vulnerability in Volano LLC Volanochatpro 2.1

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
volano-llc

Summary

The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.

Vulnerable Configurations

Part Description Count
Application
Volano_Llc
1