PT-2005-3489 · Hummingbird · Hummingbird Ftp For Connectivity

Published 2005-08-17 · Updated 2017-07-11 · CVE-2005-2599

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hummingbird FTP for Connectivity version 10.0

Description The issue allows attackers to gain privileges due to the use of weak encryption, specifically trivial encoding, to store the user's password in the FTP profile.

Recommendations For Hummingbird FTP for Connectivity version 10.0, consider changing the password storage mechanism to a more secure encryption method to prevent attackers from gaining privileges.

Fix

Related Identifiers

CVE-2005-2599

Affected Products

Hummingbird Ftp For Connectivity

References · 6

• http://secunia.com/advisories/16430 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2005-08/0219.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2599 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21811 · Note
• http://securityfocus.com/bid/14559 · Note
• http://osvdb.org/18734 · Note