VDB

GCVE-110-CERTCC-2001-279763

GCVE-110-CERTCC-2001-279763
Advisory Published
Vulnetix · Advisory published November 19, 2001
A vulnerability exists in the remote administration client for RhinoSoft Serv-U. During the authentication process, the client ignores the S/KEY one-time password (OTP) challenge sent by the server and sends the password entered by the user in plaintext.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact14population5exploitation0widely_known15score_current4.738125ease_of_exploitation19

References

RhinoSoft Serv-U remote administration client transmits password in plaintext
advisory
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url
RhinoSoft Serv-U remote administration client transmits password in plaintext
url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›