CVE-2002-2389 - TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files

Back Back to CVE browser

MEDIUM

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files

Published Oct 31, 2007

5.0

MEDIUM

CVSS 2.0

EPSS 1.90%

Description

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-255

References (5)

http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html
mailing-listx_refsource_FULLDISC
http://securitytracker.com/id?1004799
vdb-entryx_refsource_SECTRACK
http://www.iss.net/security_center/static/9624.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/295325
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/5250
vdb-entryx_refsource_BID

Link	Providers	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html		mailing-listx_refsource_FULLDISC
http://securitytracker.com/id?1004799		vdb-entryx_refsource_SECTRACK
http://www.iss.net/security_center/static/9624.php		vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/295325		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/5250		vdb-entryx_refsource_BID

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 31, 2007

Updated Sep 17, 2024

Reserved Oct 31, 2007

Link CVE-2002-2389

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2002-2389

Red Hat

Severity n/a

Public date n/a

Links CVE-2002-2389