CVE-2006-6949 Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file.
MediumCVSS 4.6
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conti ftpserver | = 1.0_build_2.8 | No fix listed |
References
- 23030 third-party-advisory vendor-advisory
- secwatch.org vendor-advisory
- 21174 vdb-entry vendor-advisory
- ADV-2006-4605 vdb-entry
- conti-ftpserver-plaintext-password(30412) vdb-entry