CVE-2003-1553

Published: Dec 31, 2003Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.

Affected (1)

Products: Sips: Sips

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sips Sips	Version 0.2.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://securityreason.com/securityalert/3780

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/315504/30/25460/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/7134

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/11572

Source: cve@mitre.org

http://securityreason.com/securityalert/3780

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/315504/30/25460/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/7134

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/11572

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.