Vulnerabilities > CVE-2004-1948 - Unspecified vulnerability in Ncftp Software Ncftp

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ncftp-software
NVD
Published: 2004-04-20
Updated: 2024-11-20

Summary

NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.

Vulnerable Configurations

Part Description Count
Application
Ncftp_Software
13

References