CVEvulnerability
CVE-2004-2400
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.
Affected configurations
• winftp server winftp server 1.6
References
- http://secunia.com/advisories/13304 Vendor Advisory
- http://securitytracker.com/id?1012321 Vendor Advisory
- http://www.osvdb.org/12122 www.osvdb.org
- http://www.securityfocus.com/bid/11749 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18247 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13304 Vendor Advisory
- http://securitytracker.com/id?1012321 Vendor Advisory
- http://www.osvdb.org/12122 www.osvdb.org
- http://www.securityfocus.com/bid/11749 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18247 exchange.xforce.ibmcloud.com