PT-2003-2421 · Cerberus · Cerberus Ftp Server

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1476

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server version 2.1

Description The issue allows local users to gain access due to the storage of usernames and passwords in plaintext.

Recommendations For Cerberus FTP Server version 2.1, consider updating the storage mechanism to securely hash and store usernames and passwords, or apply a configuration change to encrypt stored credentials. As a temporary workaround, restrict local access to the server to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-1476

Produtos afetados

Cerberus Ftp Server

Referências · 3

• http://cerberusftp.com/cerberus-releasenotes.htm#KnownIssues · Nota
• http://securityfocus.com/bid/7556 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1476 · Nota de Segurança