PT-2005-1571 · Peerftp · Peerftp
Publicado
2005-02-23
·
Atualizado
2008-09-05
·
CVE-2005-0517
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PeerFTP version 5
Description
The issue allows local users to gain privileges by accessing sensitive information stored in plaintext in the PeerFTP.ini files, such as passwords.
Recommendations
For version 5, consider encrypting or securely storing sensitive information in the PeerFTP.ini files to prevent unauthorized access. As a temporary workaround, restrict access to the PeerFTP.ini files to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Peerftp