|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[sec-adv] Small ftpd Stores Passwords in Clear Text
From: Secunia Security Advisories (sec-adv
secunia.com)
Date: Thu Aug 14 2003 - 06:45:20 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
TITLE:
Small ftpd Stores Passwords in Clear Text
READ ONLINE:
http://www.secunia.com/advisories/9527/
CRITICAL:
Less critical
IMPACT:
Exposure of sensitive information
WHERE:
Local system
SOFTWARE:
Small ftpd 1.x
DESCRIPTION:
An information disclosure vulnerability has been reported in small
ftpd, which can be exploited by malicious, local users to gain
knowledge of sensitive information.
The problem is that usernames and passwords are stored in clear text
in the file "ftpd.ini".
The vulnerability has been reported in version 1.0.3. However, prior
versions may also be affected.
SOLUTION:
Do not allow untrusted users access to the system running small ftpd.
REPORTED BY / CREDITS:
CyberTalon
----------------------------------------------------------------------
Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419
----------------------------------------------------------------------
Unsubscribe: Secunia Security Advisories
----------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]