CVE-2002-2417 acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and pos...
HighCVSS 10.0
EPSS 4.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acftp | = 1.4 | No fix listed |
References
- 20021123 acFTP Authentication Issue mailing-list
- 3334 third-party-advisory
- acftp-authentication-bypass(10681) vdb-entry
- 20021124 acFTP Authentication Issue mailing-list
- 6235 exploit vdb-entry