Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2001-0768

Overview

Vulnerability Score 4.6 4.6
CVE Id CVE-2001-0768
Last Modified 05 Sep 2008 04:24:53
Published 18 Oct 2001 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2001-0768

Summary

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.

Vulnerable Systems

Application

  • Steve Poulsen Guildftpd 0.9.7


References

XF - guildftpd-usr-plaintext-passwords(6611)

BID - 2792

BUGTRAQ - 20010526 GuildFTPD v0.97 Directory Traversal / Weak password encryption


Last Updated: 27 May 2016 10:36:24