CVE-2001-1336

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 28, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-13375.0Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.CVE-2001-13385.0Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers CVE-2001-13399.8Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easCVE-2001-13405.0Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, whicCVE-2001-13415.0The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive neCVE-2001-13425.0Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI thCVE-2001-13437.5ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacterCVE-2001-13447.5WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is maCVE-2001-13454.6bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local useCVE-2001-13461.2Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack onCVE-2001-13474.6Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled uCVE-2001-13487.5TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
CVE-2001-1336: High severity, CVSS 7.5 | Vulnix