CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Affected products

• Flashfxp (Flashfxp)

References

• http://online.securityfocus.com/archive/1/296658
• http://www.iss.net/security_center/static/10445.php
• http://www.securityfocus.com/bid/6032