Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/11/2017 Updated: 03/10/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.3 | Impact Score: 3.4 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.

Vulnerable Product	Search on Vulmon	Subscribe to Product
psftp psftpd 10.0.4

PSFTPd Windows FTP Server version 1004 Build 729 suffers from use-after-free, log injection, and various other vulnerabilities ...

CWE-287 CWE-522 https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html http://www.securityfocus.com/archive/1/541518/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-15272

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect