Vulnerabilities > CVE-2005-2898 - Unspecified vulnerability in Filezilla 2.2.14B/2.2.15

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
filezilla
exploit available
NVD
Published: 2005-09-14
Updated: 2024-11-21

Summary

NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive information. NOTE: the vendor has disputed the issue, stating that "the problem is not a vulnerability at all, but in fact a fundamental issue of every single program that can store passwords transparently.

Vulnerable Configurations

Part Description Count
Application
Filezilla
2

Exploit-Db

descriptionFileZilla 2.2.15 FTP Client Hard-Coded Cipher Key Vulnerability. CVE-2005-2898. Dos exploit for windows platform
idEDB-ID:26220
last seen2016-02-03
modified2005-09-02
published2005-09-02
reporter[email protected]
sourcehttps://www.exploit-db.com/download/26220/
titleFileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key Vulnerability

References