Description
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
References
- 20001104 Filesystem Access + VolanoChat = VChat admin (fwd) mailing-list
- 1906 vdb-entry
- volanochatpro-plaintext-password(5465) vdb-entry
- 20001106 Re: FW: Filesystem Access + VolanoChat = VChat admin (fwd) mailing-list