SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
References
Link | Resource |
---|---|
http://secunia.com/advisories/22928 | Vendor Advisory |
http://www.osvdb.org/30449 | |
http://www.vupen.com/english/advisories/2006/4540 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/30334 |
Configurations
Information
Published : 2006-11-20 13:07
Updated : 2017-07-19 18:34
NVD link : CVE-2006-5982
Mitre link : CVE-2006-5982
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
biba_software
- seleniumserver_ftp_server