CVEvulnerability
CVE-2002-2417
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Affected configurations
• acftp acftp 1.4
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html archives.neohapsis.com
- http://securityreason.com/securityalert/3334 securityreason.com
- http://www.iss.net/security_center/static/10681.php www.iss.net
- http://www.securityfocus.com/archive/1/300929 www.securityfocus.com
- http://www.securityfocus.com/bid/6235 Exploit
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html archives.neohapsis.com
- http://securityreason.com/securityalert/3334 securityreason.com
- http://www.iss.net/security_center/static/10681.php www.iss.net
- http://www.securityfocus.com/archive/1/300929 www.securityfocus.com
- http://www.securityfocus.com/bid/6235 Exploit