Vulnerability CVE-2000-0642
Published: 2000-07-12   Modified: 2012-02-12

Description:
The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Itafrica -> Webactive 

 References:
http://www.securityfocus.com/bid/1497
http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671@Rage.Resentment.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/5184
Copyright 2024, cxsecurity.com

 

Back to Top