Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2001-0768


Vulnerability Score 4.6 4.6
CVE Id CVE-2001-0768
Last Modified 05 Sep 2008 04:24:53
Published 18 Oct 2001 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector LOCAL
Access Complexity LOW
Authentication NONE



GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.

Vulnerable Systems


  • Steve Poulsen Guildftpd 0.9.7


XF - guildftpd-usr-plaintext-passwords(6611)

BID - 2792

BUGTRAQ - 20010526 GuildFTPD v0.97 Directory Traversal / Weak password encryption

Last Updated: 27 May 2016 10:36:24