CVE-2001-0768 in GuildFTPd

Sumário

de MITRE

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Divulgação: 18/10/2001
• Moderação: aceite
• Entrada: VDB-17531
• CPE: pronto
• CWE: CWE-311 (confirmado)
• CVSS: 5.9 (VulDB)
• EPSS: 0.00326
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Hospital, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2001-0768
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2001-0768
• CVE Details: https://www.cvedetails.com/cve/CVE-2001-0768/