Vulnerability in Paintbbs

CVE-2002-0202

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.

EPSS: 0.004 (33.2th percentile) — read the EPSS interpretation.

Affected products

Paintbbs — versions 1.2
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)