CVE-2002-1353: Intranet-Server LOCALWEB2000

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.

Affected products

• Intranet-Server LOCALWEB2000: version 2.1.0 only

Published 2002-08-29. Last modified 2026-06-16.