Vulnwatch mailing list archives

Plaintext Password in Settings.ini of CesarFTP


From: "Andreas Constantinides" <megahz () megahz org>
Date: Tue, 20 May 2003 10:15:59 +0300

Cesar FTP v0.99g (latest version)
an FTP Server by http://www.aclogic.com/
it saves the ftp password in file: 
c:\Program Files\CesarFTP\settings.ini
in plaintext:

....
Password= "lalala"
Login= "megahz"
Name= "megahz"
....


Discovered by MegaHz
www.megahz.org
megahz () megahz org
www.cyhackportal.com

Current thread: