Description
The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges.
References
- 3711 third-party-advisory
- sendfile-sendfilejar-weak-security(40982) vdb-entry
- 29197 third-party-advisory
- 28060 vdb-entry
- 20080229 Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials mailing-list