WinFTP Server contains a flaw that may lead to an unauthorized information disclosure. The problem is that user credentials are stored in plaintext in the "data\user.wfd" file that is readable by all local users on the system, which will disclose sensitive information resulting in a loss of confidentiality.
Classification
Location:
Local Access Required
Attack Type:
Cryptographic,
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Public
Solution
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround:
Grant only trusted users access to affected systems.
yahoo.com -
