Vulnerability in Christian Ghisler Total Commander
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.002 (13.8th percentile) — read the EPSS interpretation.
Affected products
- Christian_ghisler Total_commander — versions 6.53
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)