CVE-2001-1481: Xitami

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges.

Affected products

• Xitami Xitami: from 2.4, up to and including 2.5; version 2.5 only

Published 2001-12-31. Last modified 2026-06-16.