coffeecupbof.txt

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCTS CoffeCup Direct FTP - FTP client for Windows. CoffeeCup Free FTP - free FTP client for Windows. AFFECTED VERSION Versions verified to be vulnerable: CoffeeCup Direct FTP 6.2.0.62 latest version CoffeeCu...

CVE-2004-1118

CVE-2004-1118 affects the WodFtpDLX.ocx (WeOnlyDo!) ActiveX control before version 2.3.2.97, used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10 (and possibly other apps). A buffer overflow in the ActiveX component allows remote code execution via a long filename. Exploitation d...

CVE-2001-0103

The CVE-2001-0103 entry concerns CoffeeCup Direct and Free FTP clients that store passwords in FTPServers.ini using weak encryption. The root cause is weak password storage, enabling an attacker with local access to decrypt stored credentials (as described in the NVD entry). The connected documen...