PT-2005-1571 · Peerftp · Peerftp
Published
2005-02-23
·
Updated
2008-09-05
·
CVE-2005-0517
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PeerFTP version 5
Description
The issue allows local users to gain privileges by accessing sensitive information stored in plaintext in the PeerFTP.ini files, such as passwords.
Recommendations
For version 5, consider encrypting or securely storing sensitive information in the PeerFTP.ini files to prevent unauthorized access. As a temporary workaround, restrict access to the PeerFTP.ini files to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Peerftp