PT-2005-2113 · Ftp Now · Ftp Now

Publicado 2005-04-08 · Atualizado 2017-07-11 · CVE-2005-1094

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FTP Now version 2.6.14

Description The issue allows local users to gain privileges by accessing usernames and passwords stored in plaintext in the sites.xml file, which is world-readable.

Recommendations For FTP Now version 2.6.14, consider restricting access to the sites.xml file to prevent unauthorized users from reading the plaintext usernames and passwords. As a temporary workaround, restrict file system access to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1094

Produtos afetados

Ftp Now

Referências · 6

• 🔥 https://exploit-db.com/exploits/918 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20025 · Nota
• http://securitytracker.com/id?1013657 · Aviso do Fabricante
• http://secunia.com/advisories/14889 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1094 · Nota de Segurança
• http://osvdb.org/15296 · Nota