PT-2001-2460 · Cesarftp · Cesarftp

Published 2001-05-28 · Updated 2008-09-10 · CVE-2001-1336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CesarFTP versions 0.98b and earlier

Description The issue allows attackers to gain privileges by accessing usernames and passwords stored in plaintext in the settings.ini file.

Recommendations For CesarFTP versions 0.98b and earlier, consider encrypting or securely storing sensitive information such as usernames and passwords to prevent unauthorized access. As a temporary workaround, restrict access to the settings.ini file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1336

Affected Products

Cesarftp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1336 · Security Note
• http://iss.net/security_center/static/6608.php · Vendor Advisory
• http://securityfocus.com/bid/2785 · Note
• http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html · Note