CVE-2005-1092 Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
HighCVSS 7.2
EPSS 0.87%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| light speed technology deluxeftp | = 6.0.1 | No fix listed |
| light speed technology deluxeftp | = 7.0.1_beta | No fix listed |
References
- lostmon.blogspot.com exploit vendor-advisory
- 14923 third-party-advisory vendor-advisory
- 15421 vdb-entry
- 13105 vdb-entry