PT-2005-3489 · Hummingbird · Hummingbird Ftp For Connectivity

Publicado 2005-08-17 · Atualizado 2017-07-11 · CVE-2005-2599

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hummingbird FTP for Connectivity version 10.0

Description The issue allows attackers to gain privileges due to the use of weak encryption, specifically trivial encoding, to store the user's password in the FTP profile.

Recommendations For Hummingbird FTP for Connectivity version 10.0, consider changing the password storage mechanism to a more secure encryption method to prevent attackers from gaining privileges.

Correção

Identificadores relacionados

CVE-2005-2599

Produtos afetados

Hummingbird Ftp For Connectivity

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/21811 · Nota
• http://securityfocus.com/bid/14559 · Nota
• http://secunia.com/advisories/16430 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2005-08/0219.html · Aviso do Fabricante
• http://osvdb.org/18734 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2599 · Nota de Segurança