CVE-2001-1481

Critical

Published: 31/12/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Xitami versions 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, which has default world-readable permissions.

Risk Assessment

Remote attackers can gain access to the administrator password, allowing them to obtain system privileges.

Recommendation

It is recommended to change the permissions of the default.aut file and implement password encryption mechanisms.

Original NVD description (English source)

Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges.