CVEvulnerability
CVE-2001-0768
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
Affected configurations
• steve poulsen guildftpd 0.9.7
References
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html Vendor Advisory
- http://www.securityfocus.com/bid/2792 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6611 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html Vendor Advisory
- http://www.securityfocus.com/bid/2792 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6611 exchange.xforce.ibmcloud.com