1. Home
  2. CVE Database
  3. CVE-2001-1254
HIGH · 7.5

CVE-2001-1254

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which c...

Vulnerability Description

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Com2001Alexis Server2.0

References

FAQ

What is CVE-2001-1254?

CVE-2001-1254 is a vulnerability with a CVSS score of 7.5 (HIGH). Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which c...

How severe is CVE-2001-1254?

CVE-2001-1254 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2001-1254?

Check the references section above for vendor advisories and patch information. Affected products include: Com2001 Alexis Server.