VYPR

Blackmoon Ftp Server

by Selom Ofori

CVEs (3)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2003-03430.000.00May 21, 2003BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.
CVE-2003-03420.000.00May 20, 2003BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.
CVE-2002-01260.000.04Mar 25, 2002Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.