PT-2003-1547 · Blackmoon · Blackmoon Ftp Server

Daniel Nyström + 1 · Publicado 2003-05-21 · Atualizado 2016-10-18 · CVE-2003-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: BlackMoon FTP Server version 2.6 Free Edition

Description: The issue allows remote attackers to more easily conduct brute force attacks because the software generates an "Account does not exist" error message when an invalid username is entered.

Recommendations: For version 2.6 Free Edition, consider modifying the error message handling to prevent disclosure of account existence information, or apply alternative security measures to mitigate brute force attacks.

Correção

Identificadores relacionados

CVE-2003-0343

Produtos afetados

Blackmoon Ftp Server

Referências · 2

• http://marc.info/?l=bugtraq&m=105353283720837&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0343 · Nota de Segurança