Overview
Air Messenger LAN Server (AMLServer) stores usernames and passwords in plaintext.
Description
AMLServer for windows is a paging gateway that allows users on a TCP/IP LAN to communicate with mobile devices such as phones and pagers. Access to AMLServer's services is protected by a user authentication system that stores usernames and passwords in a plaintext file. |
Impact
If an attacker can view the AMLServer password file (through direct access or another vulnerability), they can login as any AMLServer user. |
Solution
Apply a patch when one is available. The CERT/CC is currently unaware of a practical solution to this problem. |
None. |
Vendor Information
139139
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to SNS Research for discovering this vulnerability.
This document was written by Shawn Van Ittersum.
Other Information
| CVE IDs: | CVE-2001-0786 |
| Severity Metric: | 0.07 |
| Date Public: | 2001-06-18 |
| Date First Published: | 2001-10-26 |
| Date Last Updated: | 2001-10-26 02:05 UTC |
| Document Revision: | 10 |