Lucene search
MitreCVE-2001-0768HistoryOct 18, 2001 - 4:00 a.m.
CVE-2001-0768
2001-10-1804:00:00
mitre
web.nvd.nist.gov
28
cve-2001-0768
guildftpd 0.9.7
plaintext storage
local user
ftp
gain privileges
nvd.
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
Affected configurations
Node
steve_poulsenguildftpdMatch0.9.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| steve_poulsen | guildftpd | 0.9.7 | cpe:2.3:a:steve_poulsen:guildftpd:0.9.7:*:*:*:*:*:*:* |
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2001-0768