exploits , vulnerabilities , articles , FlashFXP User Password Encryption Weakness

Title	FlashFXP User Password Encryption Weakness
Published	2003-05-05-12:00AM
Updated	2003-05-09-07:43PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	No
Local	Yes
Credit	This issue has reportedly been public knowledge for a few years. Dvdman reported the issue recently and provided an exploit.
Vulnerable	FlashFXP FlashFXP 1.4
Not Vulnerable	FlashFXP FlashFXP 2.0
Code	The following exploit was provided by Dvdman: /data/vulnerabilities/exploits/flashfxp_decrypt.c
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-11-21 SocialEngine HTTP Response Splitting and SQL-injection Vulnerabilities
• 2008-11-21 Oracle Database Vault Privilege Escalation Vulnerability
• 2008-11-20 GeSHi XML Parsing Remote Denial Of Service Vulnerability
• 2008-11-20 Softbiz Classifieds Script Cross Site Scripting Vulnerability
• 2008-11-20 P3nfs Insecure Temporary File Creation Vulnerability
• 2008-11-20 Easyedit Multiple SQL Injection Vulnerabilities
• 2008-11-20 SystemImager Insecure Temporary File Creation Vulnerabilities
• 2008-11-20 Yasna Yazd Discussion Forum Multiple Cross-Site Scripting Vulnerabilities
• 2008-11-20 phpBLASTER CMS Multiple Local File Include Vulnerabilities
• 2008-11-19 Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 21 Nov 2008 06:47:31 +0000