PT-2002-1334 · Powerftp · Powerftp Personal Ftp Server

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0264

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerFTP Personal FTP Server versions 2.03 through 2.10

Description The issue concerns the storage of sensitive account information in plaintext within the ftpserver.ini file. This allows attackers who gain access to the file to obtain privileges.

Recommendations For PowerFTP Personal FTP Server versions 2.03 through 2.10, consider restricting access to the ftpserver.ini file to minimize the risk of exploitation. Additionally, avoid storing sensitive account information in plaintext to reduce the potential impact of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0264

Produtos afetados

Powerftp Personal Ftp Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0264 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101361745222207&w=2 · Nota
• http://iss.net/security_center/static/8183.php · Nota
• http://securityfocus.com/bid/4074 · Aviso do Fabricante