PT-1999-1789 · Gftp · Gftp

Published 1999-09-05 · Updated 2008-09-05 · CVE-1999-1562

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: gFTP FTP client versions 1.13 through 1.13 and versions prior to 2.0.0

Description: The issue concerns the recording of passwords in plaintext, which can be found in either the log window or a log file.

Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue. For version 1.13, update to version 2.0.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-1999-1562

Affected Products

Gftp

References · 4

• http://securityfocus.com/archive/1/26915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1562 · Security Note
• http://debian.org/security/2001/dsa-084 · Note
• http://securityfocus.com/bid/3446 · Note