CVE-2001-1550

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.htmlVendor Advisory
http://www.securityfocus.com/bid/3704
https://exchange.xforce.ibmcloud.com/vulnerabilities/7820
http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.htmlVendor Advisory
http://www.securityfocus.com/bid/3704
https://exchange.xforce.ibmcloud.com/vulnerabilities/7820

Timeline

Published: Dec 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-15512.1Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during executi CVE-2001-15525.0ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Pr CVE-2001-15534.6Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command li CVE-2001-15545.0IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmi CVE-2001-15554.6pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write CVE-2001-15565.0The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which c CVE-2001-15577.5Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.CVE-2001-15585.0Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).CVE-2001-15595.5The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdr CVE-2001-15602.1Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by ca CVE-2001-15617.2Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.CVE-2001-15627.2Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.