Description
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
References
- guildftpd-usr-plaintext-passwords(6611) vdb-entry
- 2792 vdb-entry
- 20010526 GuildFTPD v0.97 Directory Traversal / Weak password encryption mailing-list