SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Seleniumserver_ftp_server | Biba_software | 1.0 (including) | 1.0 (including) |
References
- http://secunia.com/advisories/22928
- http://www.osvdb.org/30449
- http://www.vupen.com/english/advisories/2006/4540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30334
- http://secunia.com/advisories/22928
- http://www.osvdb.org/30449
- http://www.vupen.com/english/advisories/2006/4540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30334