CVE-2002-2389

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.

Affected (1)

Products: Fastlink Software: The Server

Fastlink Software

1 product

The Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fastlink Software The Server	Version 1.74

Related CWEs

CWE-255

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html

Source: cve@mitre.org

http://securitytracker.com/id?1004799

Source: cve@mitre.org

http://www.iss.net/security_center/static/9624.php

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/295325

Source: cve@mitre.org

http://www.securityfocus.com/bid/5250

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html