Lucene search
MitreCVE-2005-3036HistorySep 22, 2005 - 10:03 a.m.
CVE-2005-3036
2005-09-2210:03:00
mitre
web.nvd.nist.gov
22
cve-2005-3036
file transfer anywhere
plaintext password
registry key
local user privileges
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
5.1%
File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the “File Transfer Anywhere” registry key, which allows local users to gain privileges.
Affected configurations
Node
ttxnfile_transfer_anywhereMatch3.01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ttxn | file_transfer_anywhere | 3.01 | cpe:2.3:a:ttxn:file_transfer_anywhere:3.01:*:*:*:*:*:*:* |
References
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2005-3036