CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.

Score

CVSS 2.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2005-12-07

Last modified

2024-08-07

Weaknesses

CWE-310

Affected products

• Total Commander (Christian Ghisler)

References

• http://securitytracker.com/id?1015311
• http://www.networksecurity.fi/advisories/total-commander.html
• http://www.vupen.com/english/advisories/2005/2780
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23497