PT-2002-3129 · Acftp · Acftp

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2417

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions acFTP version 1.4

Description The issue arises when an invalid password is provided during authentication, allowing remote attackers to potentially hide or misrepresent certain activity from log files and possibly gain privileges.

Recommendations For acFTP version 1.4, consider updating to a newer version that properly handles authentication to prevent potential privilege escalation and log manipulation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2002-2417

Affected Products

Acftp

References · 7

• 🔥 http://securityfocus.com/bid/6235 · Exploit
• 🔥 https://exploit-db.com/exploits/22032 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2417 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html · Note
• http://securityfocus.com/archive/1/300929 · Note
• http://securityreason.com/securityalert/3334 · Note
• http://iss.net/security_center/static/10681.php · Note