PT-2002-3129 · Acftp · Acftp

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2417

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions acFTP version 1.4

Description The issue arises when an invalid password is provided during authentication, allowing remote attackers to potentially hide or misrepresent certain activity from log files and possibly gain privileges.

Recommendations For acFTP version 1.4, consider updating to a newer version that properly handles authentication to prevent potential privilege escalation and log manipulation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2002-2417

Produtos afetados

Acftp

Referências · 7

• 🔥 http://securityfocus.com/bid/6235 · Exploit
• 🔥 https://exploit-db.com/exploits/22032 · Exploit
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html · Nota
• http://securityfocus.com/archive/1/300929 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2417 · Nota de Segurança
• http://securityreason.com/securityalert/3334 · Nota
• http://iss.net/security_center/static/10681.php · Nota