PT-2001-2253 · Glenn Stephens · Eftp

Published 2001-09-12 · Updated 2008-09-05 · CVE-2001-1110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EFTP version 2.0.7.337

Description The issue allows remote attackers to obtain NETBIOS credentials by requesting information on a file in a network share. This causes the server to send the credentials to the host that owns the share, enabling the attacker to sniff the connection.

Recommendations For EFTP version 2.0.7.337, consider restricting access to network shares until a fix is available. As a temporary workaround, limit the use of NETBIOS credentials in the affected EFTP version to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1110

Affected Products

Eftp

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2001-1110 · Security Note
• http://securityfocus.com/archive/1/213647 · Vendor Advisory