CVE-2001-1253

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/217200Patch, Vendor Advisory
http://www.iss.net/security_center/static/7205.phpPatch, Vendor Advisory
http://online.securityfocus.com/archive/1/217200Patch, Vendor Advisory
http://www.iss.net/security_center/static/7205.phpPatch, Vendor Advisory

Timeline

Published: Sep 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-12547.5Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet th CVE-2001-12554.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQ CVE-2001-12561.2kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.CVE-2001-12577.5Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbit CVE-2001-12583.6Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password CVE-2001-12595.0Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.CVE-2001-126010.0Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by CVE-2001-12615.0Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and p CVE-2001-12627.5Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided st CVE-2001-12635.0telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters CVE-2001-126410.0Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.CVE-2001-12657.5Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbi