CVE-2001-0103

MEDIO 4.6CVE-2001-0103 · Published 12/02/2001 · updated 16/06/2026

In breve

CVE-2001-0103 è una vulnerabilità MEDIO (CVSS 4.6) che riguarda coffeecup direct ftp (coffeecup software), coffeecup free ftp (coffeecup software).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.21%, superiore al 11.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
coffeecup direct ftp coffeecup_software	`= 1.0`	No fix yet
coffeecup free ftp coffeecup_software	`= 1.0`	No fix yet

Description

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.

References

securityfocus.com/bid/2107 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/5744

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free