CVE-2008-1079 The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beehive software sendfile.net | All versions | No fix listed |
References
- 29197 third-party-advisory
- 3711 third-party-advisory
- 20080229 Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials mailing-list
- 28060 vdb-entry
- sendfile-sendfilejar-weak-security(40982) vdb-entry