|
Family: Windows --> Category: infos
CesarFTP stores passwords in cleartext Vulnerability Scan
Vulnerability Scan Summary Acertains the presence of CesarFTP's settings.ini
Detailed Explanation for this Vulnerability Test
The remote host has the program CesarFTP.exe installed.
There is a design issue in the program which makes it store
the username and password of the FTP server in cleartext in
the file 'settings.ini'.
Any user with an account on this host may read this file and
use the password to connect to this FTP server.
Solution : None
Risk : Low
Click HERE for more information and discussions on this network vulnerability scan.
|