Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2002-0978

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2002-0978
Last Modified 10 Sep 2008 03:13:28
Published 24 Sep 2002 12:00:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2002-0978

Summary

Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.

Vulnerable Systems

Application

  • Microsoft File Transfer Manager


References

BUGTRAQ - 20020817 Multiple security vulnerabilities inside Microsoft File Transfer Manager ActiveX control (<4.0) [buffer overflow, arbitrary file upload/download]


Last Updated: 27 May 2016 10:37:08