Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the users home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Home_ftp_server | Ari_pikivirta | 1.0.7_b45 (including) | 1.0.7_b45 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=112490496918102\u0026w=2
- http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt
- http://www.securityfocus.com/bid/14653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22002
- http://marc.info/?l=bugtraq\u0026m=112490496918102\u0026w=2
- http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt
- http://www.securityfocus.com/bid/14653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22002