Plaintext Storage of User Credentials in BlackMoon FTP Server 2.6 Free Edition

Plaintext Storage of User Credentials in BlackMoon FTP Server 2.6 Free Edition

CVE-2003-0342 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.

Learn more about our Cis Benchmark Audit For Server Software.