CVE-2005-1092

Lightspeed DeluxeFTP 6.01 - Info Disclosure

Title source: llm

Description

Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kozan · clocalwindows

https://www.exploit-db.com/exploits/936

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://secunia.com/advisories/14923

[Third Party Advisory, VDB Entry] http://www.osvdb.org/15421

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/13105

[Exploit, Vendor Advisory] http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html

Scores

EPSS 0.0013

EPSS Percentile 32.4%

Details

Status published

Products (2)

light_speed_technology/deluxeftp 6.0.1

light_speed_technology/deluxeftp 7.0.1_beta

Published May 02, 2005

Tracked Since Feb 18, 2026