CVE-2002-1939 - CVE House
Back to Database
Status published Low CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are...

Vulnerability Description

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1939

Credits & Attribution

No credits recorded in the NVD database.

References

More from flashfxp

View All →
CVE-2012-4992
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote...
Critical 9
CVE-2007-0825
FlashFXP 3.4.0 build 1145 allows remote servers to cause a...
High 7.8
CVE-2003-1483
FlashFXP 1.4 uses a weak encryption algorithm for user passwords,...
Medium 6.4

Affected Vendor

Affected Software

flashfxp
Vulnerable Versions:
1.4

Timeline

Official Publish: June 28th, 2005
Last Modified: September 17th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.