WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/11749 | |
| http://www.osvdb.org/12122 | |
| http://securitytracker.com/id?1012321 | Vendor Advisory |
| http://secunia.com/advisories/13304 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18247 |
Configurations
Information
Published : 2004-12-30 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-2400
Mitre link : CVE-2004-2400
JSON object : View
CWE
Products Affected
winftp_server
- winftp_server


