coffeecupbof.txt

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCTS CoffeCup Direct FTP - FTP client for Windows. CoffeeCup Free FTP - free FTP client for Windows. AFFECTED VERSION Versions verified to be vulnerable: CoffeeCup Direct FTP 6.2.0.62 latest version CoffeeCu...

CVE-2004-1118

CVE-2004-1118 affects the WodFtpDLX.ocx (WeOnlyDo!) ActiveX control before version 2.3.2.97, used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10 (and possibly other apps). A buffer overflow in the ActiveX component allows remote code execution via a long filename. Exploitation d...

CVE-2004-1118: Undefined Security Weakness

Buffer overflow in the WodFtpDLX.ocx WeOnlyDo! ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename...

CVE-2001-0103

The CVE-2001-0103 entry concerns CoffeeCup Direct and Free FTP clients that store passwords in FTPServers.ini using weak encryption. The root cause is weak password storage, enabling an attacker with local access to decrypt stored credentials (as described in the NVD entry). The connected documen...

CVE-2001-0103: Undefined Security Weakness

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...