WinFTP Server 1.6 stores username and password credentials in plaintext in the datauser.wfd file, which allows local users to gain access to the credentials.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Winftp_server | Winftp_server | 1.6 (including) | 1.6 (including) |
References
- http://secunia.com/advisories/13304
- http://securitytracker.com/id?1012321
- http://www.osvdb.org/12122
- http://www.securityfocus.com/bid/11749
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18247
- http://secunia.com/advisories/13304
- http://securitytracker.com/id?1012321
- http://www.osvdb.org/12122
- http://www.securityfocus.com/bid/11749
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18247