CVE-2005-1092

2005-04-1304:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

Percentile

0.4%

JSON

Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

References

lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html

secunia.com/advisories/14923

www.osvdb.org/15421

www.securityfocus.com/bid/13105