CVE-2004-1948
First published: Tue Apr 20 2004(Updated: )
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ncftp Software Ncftp | =3.0.2 | |
| Ncftp Software Ncftp | =3.1.3 | |
| Ncftp Software Ncftp | =3.1.4 | |
| Ncftp Software Ncftp | =3.0.0 | |
| Ncftp Software Ncftp | =3.1.0 | |
| Ncftp Software Ncftp | =3.0.3 | |
| Ncftp Software Ncftp | =3.1.6 | |
| Ncftp Software Ncftp | =3.1.5 | |
| Ncftp Software Ncftp | =3.1.7 | |
| Ncftp Software Ncftp | =3.1.1 | |
| Ncftp Software Ncftp | =3.0.1 | |
| Ncftp Software Ncftp | =3.1.2 | |
| Ncftp Software Ncftp | =3.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- vendor/ncftp software
- product/ncftp
- canonical/ncftp software ncftp
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- version/ncftp software ncftp/3.0.2
- version/ncftp software ncftp/3.1.3
- version/ncftp software ncftp/3.1.4
- version/ncftp software ncftp/3.0.0
- version/ncftp software ncftp/3.1.0
- version/ncftp software ncftp/3.0.3
- version/ncftp software ncftp/3.1.6
- version/ncftp software ncftp/3.1.5
- version/ncftp software ncftp/3.1.7
- version/ncftp software ncftp/3.1.1
- version/ncftp software ncftp/3.0.1
- version/ncftp software ncftp/3.1.2
- version/ncftp software ncftp/3.0.4