CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-255, CWE-310

Affected products

• Flashfxp (Flashfxp)

References

• http://downloads.securityfocus.com/vulnerabilities/exploits/flashfxp_decrypt.c
• http://securitytracker.com/id?1006730
• http://www.securityfocus.com/bid/7499
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12298