PT-2006-6643 · Selenium · Seleniumserver Ftp Server

Published 2006-11-20 · Updated 2017-07-20 · CVE-2006-5982

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SeleniumServer FTP Server version 1.0, and possibly earlier

Description The issue allows attackers to obtain passwords by reading a file where user passwords are stored in plaintext in the Servers directory.

Recommendations For SeleniumServer FTP Server version 1.0, and possibly earlier, consider changing all passwords stored in the Servers directory to mitigate the risk of exploitation. As a temporary workaround, restrict access to the Servers directory to minimize the risk of attackers reading the plaintext passwords.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2006-5982

Affected Products

Seleniumserver Ftp Server

References · 5

• http://secunia.com/advisories/22928 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4540 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5982 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30334 · Note
• http://osvdb.org/30449 · Note