critical10.0Public exploit code
CVE-2002-2417
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresen…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- acFTP 1.4 - Invalid Password Weak Authentication2002-11-25 · remote · windows · Verified
Impact
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acftp | Acftp | Version 1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html
- http://securityreason.com/securityalert/3334
- http://www.iss.net/security_center/static/10681.php
- http://www.securityfocus.com/archive/1/300929
- http://www.securityfocus.com/bid/6235
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html
- http://securityreason.com/securityalert/3334
- http://www.iss.net/security_center/static/10681.php
- http://www.securityfocus.com/archive/1/300929
- http://www.securityfocus.com/bid/6235