CVE-2001-0870

Published: Dec 21, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.

Affected (10)

Products: Alchemy Lab: Alchemy Eye · Dek Software: Alchemy Network Monitor

Alchemy Lab

1 product

Alchemy Eye

Dek Software

1 product

Alchemy Network Monitor

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Alchemy Lab Alchemy Eye	Version 1.9
Alchemy Lab Alchemy Eye	Version 2.0
Alchemy Lab Alchemy Eye	Version 2.1
Alchemy Lab Alchemy Eye	Version 2.2
Alchemy Lab Alchemy Eye	Version 2.3
Alchemy Lab Alchemy Eye	Version 2.4
Alchemy Lab Alchemy Eye	Version 2.5
Alchemy Lab Alchemy Eye	Version 2.6.18
Alchemy Lab Alchemy Eye	Version 2.6
Dek Software Alchemy Network Monitor	version ≤ 2.6.18

References (6)

http://marc.info/?l=bugtraq&m=100715758109838&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/3598

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7630

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=100715758109838&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3598

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7630

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.