CVE-2001-1341

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
http://www.iss.net/security_center/static/6600.phpVendor Advisory
http://www.kb.cert.org/vuls/id/574739US Government Resource
http://www.securityfocus.com/archive/1/186418
http://www.securityfocus.com/bid/2767Patch, Vendor Advisory
http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
http://www.iss.net/security_center/static/6600.phpVendor Advisory
http://www.kb.cert.org/vuls/id/574739US Government Resource
http://www.securityfocus.com/archive/1/186418
http://www.securityfocus.com/bid/2767Patch, Vendor Advisory

Timeline

Published: May 24, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13425.0Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th CVE-2001-13437.5ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacter CVE-2001-13447.5WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is ma CVE-2001-13454.6bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local use CVE-2001-13461.2Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on CVE-2001-13474.6Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled u CVE-2001-13487.5TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.CVE-2001-13493.7Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and g CVE-2001-13507.5Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as oth CVE-2001-13517.5Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi CVE-2001-13527.5Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi CVE-2001-13532.6ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabl