Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| DelphiTurk FTP Discloses Passwords to Local Users |
|---|
Categorie: Vulnerability
Posted: 2005-02-12 by ReCall
Views: 366
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: Kozan reported a vulnerability in DelphiTurk FTP. A local user can obtain FTP passwords.
DelphiTurk FTP stores FTP account information, including usernames and passwords, in the 'profile.dat' file. The file is stored in the same directory as the executable.
The data is stored at the following byte locations:
2. byte = profilname (read 31 bytes)
32. byte = ftpserver (read 51 bytes)
82. byte = username (read 51 bytes)
133. byte = password (read 51 bytes)
392. byte = newprofilname...................
A local user can obtain passwords from the file.
Impact: A local user can obtain FTP passwords.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1354
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
