header-logo
Suggest Exploit
vendor:
602Pro LAN SUITE 2003
by:
SecurityFocus
8.8
CVSS
HIGH
Credential Storage
522
CWE
Product Name: 602Pro LAN SUITE 2003
Affected Version From: 602Pro LAN SUITE 2003
Affected Version To: 602Pro LAN SUITE 2003
Patch Exists: YES
Related CWE: CVE-2003-0459
CPE: a:software602:602pro_lan_suite_2003
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2003

A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003

Software602 602Pro LAN SUITE 2003 stores user credentials in plaintext in the S030904L.LOG file. An attacker can gain access to this file and view the credentials, potentially allowing them to gain access to the system.

Mitigation:

Users should ensure that the S030904L.LOG file is not accessible to unauthorized users.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/8700/info

A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information. 

http://www.example.com/mail/S030904L.LOG