CVE-2021-41637

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...

CVE-2021-41637

CVE-2021-41637 concerns MELAG FTP Server 2.2.0.4 with weak access control that permits the Everyone group to read the local FTP configuration file, exposing unencrypted passwords of all FTP users. The connected CNVD/CVE entries describe this as an authorization issue rooted in improper file permi...

CVE-2021-41638

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

CVE-2021-41638

Summary (CVE-2021-41638) The issue affects MELAG FTP Server (version 2.2.0.4), where authentication checks are incomplete. This allows a remote attacker to access local files using a valid username. The Red Hat, NVD, CNVD, and other entries corroborate the vulnerability description; no specific e...

CVE-2021-41639

MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file...

CVE-2021-41639

The CVE describes MELAG FTP Server 2.2.0.4 storing unencrypted FTP user passwords in a local configuration file, causing information disclosure. Root cause: passwords stored in plaintext locally. Impact: unauthorized disclosure of sensitive credentials potentially accessible to an attacker with l...

MELAG FTP Server 路径遍历漏洞

MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...

MELAG FTP Server 安全漏洞

MELAG FTP Server, an FTP server from MELAG Germany, is vulnerable to an authorization issue in MELAG FTP Server version 2.2.0.4, which stems from improper file permission management and could be exploited to cause the "Everyone" group to read local FTP configuration file, which includes informati...

MELAG FTP Server 安全漏洞

MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which can be exploited by a remote attacker to gain administrative access to the entire host system...

CVE-2021-41634: Observable Discrepancy

A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames...

MELAG FTP Server 安全漏洞

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to a user enumeration vulnerability, which stems from the fact that the program presents different responses to users and non-users, and can be exploited by attackers to identify...

CVE-2021-41639: Cleartext Storage of Sensitive Information

MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file...

PT-2022-11448

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4 Description The authentication checks of the MELAG FTP Server are incomplete, allowing a remote attacker to access local files by using a valid username. Recommendations For version 2.2.0.4, consider restrictin...

PT-2022-11444

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4 Description A user enumeration issue allows an attacker to identify valid FTP usernames. Recommendations For MELAG FTP Server version 2.2.0.4, consider restricting access to the FTP server until a patch is...

PT-2022-11445

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4 Description The issue allows remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system when MELAG FTP Server is installed as a Windows service and run...

PT-2022-11447

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4 Description The issue concerns weak access control permissions that allow the "Everyone" group to read the local FTP configuration file. This file contains unencrypted passwords of all FTP users, among other...

CVE-2021-41636: Improper Limitation of a Pathname to a Restricted Directory

MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, while the access restrictions of the user running the FTP server apply...

CVE-2021-41638: Improper Authentication

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

CVE-2021-41635: Incorrect Default Permissions

When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system...

CVE-2021-41637: Incorrect Default Permissions

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...