Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.
Link | Tags |
---|---|
http://www.iss.net/security_center/static/10198.php | vdb entry vendor advisory |
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0128.html | mailing list vendor advisory |
http://www.securityfocus.com/bid/5803 | vdb entry vendor advisory |