header-logo
Suggest Exploit
vendor:
acFTP
by:
SecurityFocus
7.5
CVSS
HIGH
Authentication Bypass
287
CWE
Product Name: acFTP
Affected Version From: acFTP 1.0
Affected Version To: acFTP 1.0
Patch Exists: YES
Related CWE: CVE-2002-1390
CPE: a:acftp:acftp:1.0
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002

Authentication Bypass

acFTP is vulnerable to an authentication bypass vulnerability. An attacker can exploit this vulnerability by sending a USER command with a valid username and a blank password. This will allow the attacker to log on to the FTP server without proper authentication.

Mitigation:

Upgrade to the latest version of acFTP.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6235/info

A vulnerability has been reported for acFTP. Reportedly, acFTP allows users to authenticate without a valid password.

An attacker can exploit this vulnerability and log on to the vulnerable FTP server without need for proper authentication.

USER private
PASS #

Navigation

Suggest Exploit

Services By CQR