Vulnerabilities > CVE-2002-1353 - Remote Security vulnerability in Intranet-Server Localweb2000 2.1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |