CVE-2001-1463

Description

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authentication is enabled, which allows remote attackers to sniff passwords.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/7925

https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1443

http://www.kb.cert.org/vuls/id/279763

http://securitytracker.com/id?1002882

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS