PT-1999-1562 · Ipswitch · Ws Ftp Pro

Published 1999-07-29 · Updated 2008-09-05 · CVE-1999-1078

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WS FTP Pro version 6.0

Description The issue concerns the use of weak encryption for passwords in initialization files, allowing remote attackers to easily decrypt the passwords and gain privileges.

Recommendations For WS FTP Pro version 6.0, update the software to a version that uses strong encryption for passwords, or consider using alternative secure methods for storing and managing passwords.

Fix

Related Identifiers

CVE-1999-1078

Affected Products

Ws Ftp Pro

References · 4

• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1078 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1078 · Note
• http://securityfocus.com/bid/547 · Note