PT-2001-2347 · Datawizard · Datawizard Ftpxq

Published 2001-12-18 · Updated 2008-09-10 · CVE-2001-1213

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions DataWizard FtpXQ versions 2.0 through 2.1

Description The default configuration of the software includes a default username and password. This allows remote attackers to read and write arbitrary files in the root folder.

Recommendations For versions 2.0 and 2.1, change the default username and password to secure credentials as soon as possible to prevent unauthorized access.

Fix

Related Identifiers

CVE-2001-1213

Affected Products

Datawizard Ftpxq

References · 4

• http://securityfocus.com/archive/1/246285 · Vendor Advisory
• http://iss.net/security_center/static/7715.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1213 · Security Note
• http://securityfocus.com/bid/3716 · Note