PT-2001-2253 · Glenn Stephens · Eftp

Publicado 2001-09-12 · Atualizado 2008-09-05 · CVE-2001-1110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EFTP version 2.0.7.337

Description The issue allows remote attackers to obtain NETBIOS credentials by requesting information on a file in a network share. This causes the server to send the credentials to the host that owns the share, enabling the attacker to sniff the connection.

Recommendations For EFTP version 2.0.7.337, consider restricting access to network shares until a fix is available. As a temporary workaround, limit the use of NETBIOS credentials in the affected EFTP version to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1110

Produtos afetados

Eftp

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2001-1110 · Nota de Segurança
• http://securityfocus.com/archive/1/213647 · Aviso do Fabricante