Unscored CVE-2001-1336 EUVD-2001-1317GHSA-8h56-mx2q-hr97

CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.

References

20010527 CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption mailing-list
2785 vdb-entry
cesarftp-settings-plaintext-password(6608) vdb-entry