Sun Chilisoft vulnerabilities

4 CVEs affecting Sun Chilisoft, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0634, published 2001-08-22.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0633, published 2001-08-22. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script…
• CVE-2001-0632, published 2001-08-22. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.
• CVE-2001-0229, published 2001-05-03. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
• CVE-2001-0634, published 2001-08-22. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.