Skip to content
OpenAdvisories
Unscored CVE-2017-15272 EUVD-2017-6732GHSA-jc82-2cpg-hfg5

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracte…

Published Nov 15, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.

References