| Vulnerability Name: | CCN-13725 |
| Published: | 2003-11-11 |
| Updated: | 2003-11-11 |
| Summary: | The File Transfer (FTP) service enables access to a system using a weak authentication method with clear-text passwords. Additionally, programming flaws in this service may allow attackers to gain root access. Ideally this service should be disabled. If the service is required, then access to the service can be restricted using the 'TCP Wrappers' utility. This provides fine-grained access control, allowing access to services to be either allowed or denied on a host-by-host basis. |
| CVSS v3 Severity: | |
| CVSS v2 Severity: | |
| Vulnerability Consequences: | Informational |
| References: | Source: CCN Type: SANS Web site SANS Top 20 Internet Security Vulnerabilities Source: XF Type: UNKNOWN ftp-wrapped(13725) |
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable |
| BACK | |