PT-2001-2460 · Cesarftp · Cesarftp

Publicado 2001-05-28 · Atualizado 2008-09-10 · CVE-2001-1336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CesarFTP versions 0.98b and earlier

Description The issue allows attackers to gain privileges by accessing usernames and passwords stored in plaintext in the settings.ini file.

Recommendations For CesarFTP versions 0.98b and earlier, consider encrypting or securely storing sensitive information such as usernames and passwords to prevent unauthorized access. As a temporary workaround, restrict access to the settings.ini file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1336

Produtos afetados

Cesarftp

Referências · 4

• http://securityfocus.com/bid/2785 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1336 · Nota de Segurança
• http://iss.net/security_center/static/6608.php · Aviso do Fabricante