CesarFTP Plaintext Password Storage Vulnerability

Bugtraq ID:	2785
Class:	Design Error
CVE:	CVE-2001-1336
Remote:	No
Local:	Yes
Published:	May 27 2001 12:00AM
Updated:	Jul 11 2009 06:06AM
Credit:	This vulnerability was posted to BugTraq on May 27th, 2001 by ByteRage <[email protected]>.
Vulnerable:	ACLogic CesarFTP 0.99 g ACLogic CesarFTP 0.98 b - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 j - Microsoft Windows 95 Build 490.R6 - Microsoft Windows 95 - Microsoft Windows 98 j - Microsoft Windows 98 b - Microsoft Windows 98 a - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5
Not Vulnerable:

CesarFTP Plaintext Password Storage Vulnerability

CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems.

CesarFTP stores the plaintext passwords of FTP user accounts in a file called 'settings.ini'.

Any user to view this file would be able to log into the FTP server as any ftp user on the system. This vulnerability may also compromise other places where the users authenticate, if they use the same password.