CVE-2003-1553

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-200

Description

Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.

Affected products

Sips: 0.2.2

References

http://securityreason.com/securityalert/3780
http://www.securityfocus.com/archive/1/315504/30/25460/threaded
http://www.securityfocus.com/bid/7134
https://exchange.xforce.ibmcloud.com/vulnerabilities/11572
http://securityreason.com/securityalert/3780
http://www.securityfocus.com/archive/1/315504/30/25460/threaded
http://www.securityfocus.com/bid/7134
https://exchange.xforce.ibmcloud.com/vulnerabilities/11572

Get alerted when CVE-2003-1553 or the next vulnerability affects your stack