Vulnerability in Cerberusftp FTP Server
CVE-2012-5301
The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.
Affected products
- Cerberusftp Ftp_server — versions 1.0, 1.01, 1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)