PT-1999-1665 · Auto Ftp · Auto Ftp
Publicado
1999-10-05
·
Atualizado
2016-10-18
·
CVE-1999-1344
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Auto FTP version 0.2
Description:
The issue concerns the storage of sensitive information in plaintext. Specifically, the Auto FTP.pl script in Auto FTP stores usernames and passwords in plaintext in the auto ftp.conf configuration file.
Recommendations:
For Auto FTP version 0.2, consider modifying the script to store usernames and passwords securely, such as using encryption, to prevent unauthorized access to sensitive information. As a temporary workaround, restrict access to the auto ftp.conf configuration file to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Auto Ftp