DEBIAN-CVE-2008-4677

autoload/netrw.vim aka the Netrw Plugin 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote...

CVE-2008-4677

autoload/netrw.vim aka the Netrw Plugin 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote...

CVE-2008-4677

autoload/netrw.vim aka the Netrw Plugin 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote...

CVE-2008-4677

CVE-2008-4677 affects the Netrw plugin (autoload/netrw.vim) in Vim 7.1.x and 7.2-era configurations, where credentials stored for an FTP session could be disclosed to remote servers. The issue stems from the netrw plugin sending stored usernames/passwords during subsequent FTP attempts to differe...

CVE-2007-4656

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than...

DEBIAN-CVE-2007-4656

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than...

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

DEBIAN-CVE-2004-1948

NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list...

Fastream NETFile DoS

Server crashes on unknown FTP username/password...

CVE-1999-1235

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow 1 local users to read the information from another user's index.dat, or 2 people who are physically observing "shoulder surfing" another user to read the information from the status bar...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-1999-1235

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow 1 local users to read the information from another user's index.dat, or 2 people who are physically observing "shoulder surfing" another user to read the information from the status bar...