PT-2003-1547 · Blackmoon · Blackmoon Ftp Server

Daniel Nyström + 1 · Published 2003-05-21 · Updated 2016-10-18 · CVE-2003-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: BlackMoon FTP Server version 2.6 Free Edition

Description: The issue allows remote attackers to more easily conduct brute force attacks because the software generates an "Account does not exist" error message when an invalid username is entered.

Recommendations: For version 2.6 Free Edition, consider modifying the error message handling to prevent disclosure of account existence information, or apply alternative security measures to mitigate brute force attacks.

Fix

Related Identifiers

CVE-2003-0343

Affected Products

Blackmoon Ftp Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0343 · Security Note
• http://marc.info/?l=bugtraq&m=105353283720837&w=2 · Note