PT-2003-2421 · Cerberus · Cerberus Ftp Server

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1476

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server version 2.1

Description The issue allows local users to gain access due to the storage of usernames and passwords in plaintext.

Recommendations For Cerberus FTP Server version 2.1, consider updating the storage mechanism to securely hash and store usernames and passwords, or apply a configuration change to encrypt stored credentials. As a temporary workaround, restrict local access to the server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-1476

Affected Products

Cerberus Ftp Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-1476 · Security Note
• http://cerberusftp.com/cerberus-releasenotes.htm#KnownIssues · Note
• http://securityfocus.com/bid/7556 · Note