CVE-2002-1939

Published: Dec 31, 2002Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.

Affected (1)

Products: Flashfxp: Flashfxp

Flashfxp

1 product

Flashfxp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flashfxp Flashfxp	Version 1.4

References (6)

http://online.securityfocus.com/archive/1/296658

Source: cve@mitre.org

http://www.iss.net/security_center/static/10445.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/6032

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/296658

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10445.php

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/6032

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.