CVE-2021-41634

Description

References

• securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server · Exploit

Autres vulnérabilités de ftp server

• CVE-2021-41639MOYENNE 5.5MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.
• CVE-2021-41638ÉLEVÉE 7.5The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files on…
• CVE-2021-41637ÉLEVÉE 7.1Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which inclu…
• CVE-2021-41636MOYENNE 6.5MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire …
• CVE-2021-41635ÉLEVÉE 8.8When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations o…