PT-1999-1562 · Ipswitch · Ws Ftp Pro

Publicado 1999-07-29 · Atualizado 2008-09-05 · CVE-1999-1078

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WS FTP Pro version 6.0

Description The issue concerns the use of weak encryption for passwords in initialization files, allowing remote attackers to easily decrypt the passwords and gain privileges.

Recommendations For WS FTP Pro version 6.0, update the software to a version that uses strong encryption for passwords, or consider using alternative secure methods for storing and managing passwords.

Correção

Identificadores relacionados

CVE-1999-1078

Produtos afetados

Ws Ftp Pro

Referências · 4

• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1078 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1078 · Nota de Segurança
• http://securityfocus.com/bid/547 · Nota