VYPR

Chilisoft

by Sun Corporation

CVEs (4)

  • CVE-2001-0634Aug 22, 2001
    risk 0.00cvss epss 0.00

    Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.

  • CVE-2001-0632Aug 22, 2001
    risk 0.00cvss epss 0.01

    Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.

  • CVE-2001-0633Aug 22, 2001
    risk 0.00cvss epss 0.00

    Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'.

  • CVE-2001-0229May 3, 2001
    risk 0.00cvss epss 0.00

    Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.