CVE-2004-2400 - CVE House
Back to Database
Status published Low CVE-2004-2400

WinFTP Server 1.6 stores username and password credentials in plaintext...

Vulnerability Description

WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2400

Credits & Attribution

No credits recorded in the NVD database.

References

More from winftp server

View All →
CVE-2006-6673
WinFtp Server 2.0.2 allows remote attackers to cause a denial...
Medium 5
CVE-2005-2634
Buffer overflow in the Log-SCR function in the "Log to...
High 7.5

Affected Vendor

winftp server

View all reports →

Affected Software

winftp server
Vulnerable Versions:
1.6

Timeline

Official Publish: August 17th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.