CVE-2002-2417
Acftp - Authentication Bypass
Title source: ruleDescription
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Matthew Murphy · textremotewindows
https://www.exploit-db.com/exploits/22032
References (5)
Scores
EPSS
0.0531
EPSS Percentile
89.9%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
acftp/acftp
Timeline
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026