CVE-2002-0264 PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft powerftp | = 2.03 | No fix listed |
| cooolsoft powerftp | = 2.10 | No fix listed |
References
- 20020211 PowerFTP Personal FTP Server Multiple Vulnerabilities mailing-list
- powerftp-ftpserver-ini-plaintext(8183) vdb-entry
- 4074 vdb-entry vendor-advisory