Nessus Plugin #11151

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Webserver 4D Cleartext Passwords

Family:

Misc.

Category:

infos

Copyright:

This script is Copyright (C) 2002 Jason Lidow <jason@brandx.net>

Summary:

Checks for Webserver 4D

Version:

$Revision: 1.6 $

Cve_id:

CAN-2002-1521

Bugtraq_id:

5803

Xrefs:

-

Description:

The remote host is running Webserver 4D 3.6 or lower.

Version 3.6 of this service stores all usernames and passwords in cleartext.
File: C:\Program Files\MDG\Web Server 4D 3.6.0\Ws4d.4DD

A local attacker may use this flaw to gain unauthorized privileges
on this host.


Solution: Contact http://www.mdg.com for an update.
Risk Factor: Low