Lucene search
HistoryMay 03, 2002 - 4:00 a.m.
CVE-2001-1253
cve-2001-1253
alexis
com2001
internetpbx
voicemail
plaintext passwords
local threat.
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.
Affected configurations
Node
com2001alexis_serverMatch2.0
ORcom2001alexis_serverMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| com2001:alexis_server | com2001 alexis server | eq | 2.0 |
| com2001:alexis_server | com2001 alexis server | eq | 2.1 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Related for CVE-2001-1253