CVE-2002-1939

FlashFXP 1.4 stores FTP passwords in plaintext in the queue properties, which can be exposed when queue transfers are present. This allows an attacker who can edit the queue to obtain other users’ FTP credentials. The issue is documented in CVE-2002-1939 and echoed across multiple sources (NVD/Re...

CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...

CVE-2002-1939: Undefined Security Weakness

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...

CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...

FlashFXP < 2.1b923 Multiple Remote Overflows

FlashFXP, an FTP client, is installed on the remote host. This version is vulnerable to a stack-based buffer overflow attack when receiving a long response to the PASV command, or when processing a long host name. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11710;...

[FlashFXP] Two Buffer Overflow Vulnerabilities

----------------------------------------------------------------------- SUMMARY : FlashFXP Two Buffer Overflow Vulnerabilities PRODUCT : FlashFXP VERSIONS : 2.0 build 905 VENDOR : CEDsoft http://www.flashfxp.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin AUTHOR : :: Operash ::...

KLA10161 ACE vulnerability in FlashFXP

A buffer overflow was found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed hostname or PASV reply. Original advisories Security issue Exploitation Related products FlashFXP CVE list...

FlashFXP 1.4 - User Password Encryption

FlashFXP 1.4 - User Password Encryption // source: https://www.securityfocus.com/bid/7499/info FlashFXP uses a trivially reversible algorithm to encrypt FTP user credentials. Local attackers with access to the sites.data may exploit this weakness to gain unauthorized access to FTP user credential...

FlashFXP 1.4 - User Password Encryption

// source: https://www.securityfocus.com/bid/7499/info FlashFXP uses a trivially reversible algorithm to encrypt FTP user credentials. Local attackers with access to the sites.data may exploit this weakness to gain unauthorized access to FTP user credentials for remote sites. / Flashfxp sites.dat...

CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...