PT-2005-2113 · Ftp Now · Ftp Now

Published 2005-04-08 · Updated 2017-07-11 · CVE-2005-1094

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FTP Now version 2.6.14

Description The issue allows local users to gain privileges by accessing usernames and passwords stored in plaintext in the sites.xml file, which is world-readable.

Recommendations For FTP Now version 2.6.14, consider restricting access to the sites.xml file to prevent unauthorized users from reading the plaintext usernames and passwords. As a temporary workaround, restrict file system access to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1094

Affected Products

Ftp Now

References · 6

• 🔥 https://exploit-db.com/exploits/918 · Exploit
• http://securitytracker.com/id?1013657 · Vendor Advisory
• http://secunia.com/advisories/14889 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1094 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20025 · Note
• http://osvdb.org/15296 · Note