CVE-2000-1148

The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.

Date published : 2001-01-22

http://www.securityfocus.com/bid/1906

http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html