Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-48gw-crqw-m5r2

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.

EPSS

Процентиль: 12%
0.0004
Низкий

Связанные уязвимости

nvd
около 20 лет назад

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.

EPSS

Процентиль: 12%
0.0004
Низкий