← back
CVE-2005-4066

CVE-2005-4066

EPSS 0.2%
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://securitytracker.com/id?1015311https://exchange.xforce.ibmcloud.com/vulnerabilities/23497http://www.networksecurity.fi/advisories/total-commander.htmlhttp://www.vupen.com/english/advisories/2005/2780