GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Guildftpd |
Steve_poulsen |
0.9.7 (including) |
0.9.7 (including) |
References