CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2007-01-23

Last modified

2024-08-07

Affected products

• Ftpserver (Conti)

References

• http://secunia.com/advisories/23030
• http://secwatch.org/advisories/1016194/
• http://www.securityfocus.com/bid/21174
• http://www.vupen.com/english/advisories/2006/4605
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30412