CVE

Id
14104  
CVE No.
CVE-2005-2898  
Status
Candidate  
Description
** DISPUTED ** NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user"s password in the configuration settings file, which allows local users to obtain sensitive information. NOTE: the vendor has disputed the issue, stating that "the problem is not a vulnerability at all, but infact a fundamental issue of every single program that can store passwords transparently."  
Phase
Assigned (20050914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
104194 14104 CVE-2005-2898 BUGTRAQ:20050902 FileZilla weakly-encrypted password vulnerability: advisory + PoC  View
104195 14104 CVE-2005-2898 URL:http://marc.info/?l=bugtraq&m=112577523810442&w=2  View
104196 14104 CVE-2005-2898 BUGTRAQ:20050904 Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC  View
104197 14104 CVE-2005-2898 URL:http://marc.info/?l=bugtraq&m=112605448327521&w=2  View
104198 14104 CVE-2005-2898 MISC:http://filezilla.sourceforge.net/forum/viewtopic.php?t=1328  View
104199 14104 CVE-2005-2898 BID:14730  View
104200 14104 CVE-2005-2898 URL:http://www.securityfocus.com/bid/14730  View
104201 14104 CVE-2005-2898 XF:filezilla-password-weak-encryption(22135)  View

Related JVN