CVE-2012-5301: Medium severity cerberusftp ftp server vulnerability
Published Oct 4, 2012
·Updated
The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.
Affected Software
126 affected components
Cerberusftp Ftp Server<=5.0.3.1
Cerberusftp Ftp Server=1.0
Cerberusftp Ftp Server=1.01
Cerberusftp Ftp Server=1.1
Cerberusftp Ftp Server=1.2
Cerberusftp Ftp Server=1.02
Cerberusftp Ftp Server=1.03
Cerberusftp Ftp Server=1.5
Cerberusftp Ftp Server=1.05
Cerberusftp Ftp Server=1.6-beta
Cerberusftp Ftp Server=1.7
Cerberusftp Ftp Server=1.22
Cerberusftp Ftp Server=1.71
Cerberusftp Ftp Server=2.0
Cerberusftp Ftp Server=2.0-beta1
Cerberusftp Ftp Server=2.0-beta2
Cerberusftp Ftp Server=2.0-beta3
Cerberusftp Ftp Server=2.0-beta4
Cerberusftp Ftp Server=2.1
Cerberusftp Ftp Server=2.01
Cerberusftp Ftp Server=2.02
Cerberusftp Ftp Server=2.2
Cerberusftp Ftp Server=2.02-beta
Cerberusftp Ftp Server=2.2-beta1
Cerberusftp Ftp Server=2.2-beta2
Cerberusftp Ftp Server=2.2-beta3
Cerberusftp Ftp Server=2.3
Cerberusftp Ftp Server=2.4
Cerberusftp Ftp Server=2.4-beta1
Cerberusftp Ftp Server=2.4-beta2
Cerberusftp Ftp Server=2.4-beta3
Cerberusftp Ftp Server=2.11
Cerberusftp Ftp Server=2.11-beta
Cerberusftp Ftp Server=2.11-beta2
Cerberusftp Ftp Server=2.15
Cerberusftp Ftp Server=2.15-beta
Cerberusftp Ftp Server=2.16
Cerberusftp Ftp Server=2.21
Cerberusftp Ftp Server=2.22
Cerberusftp Ftp Server=2.23-beta
Cerberusftp Ftp Server=2.31
Cerberusftp Ftp Server=2.32
Cerberusftp Ftp Server=2.41
Cerberusftp Ftp Server=2.42
Cerberusftp Ftp Server=2.43
Cerberusftp Ftp Server=2.44
Cerberusftp Ftp Server=2.45
Cerberusftp Ftp Server=2.46
Cerberusftp Ftp Server=2.47
Cerberusftp Ftp Server=2.48
Cerberusftp Ftp Server=2.49
Cerberusftp Ftp Server=2.50
Cerberusftp Ftp Server=3.0
Cerberusftp Ftp Server=3.0.1
Cerberusftp Ftp Server=3.0.2
Cerberusftp Ftp Server=3.0.3
Cerberusftp Ftp Server=3.0.4
Cerberusftp Ftp Server=3.0.5
Cerberusftp Ftp Server=3.0.6
Cerberusftp Ftp Server=3.0.7
Cerberusftp Ftp Server=3.0.7.1
Cerberusftp Ftp Server=3.0.8
Cerberusftp Ftp Server=3.1
Cerberusftp Ftp Server=3.1.0.3
Cerberusftp Ftp Server=3.1.0.4
Cerberusftp Ftp Server=3.1.0.5
Cerberusftp Ftp Server=3.1.1
Cerberusftp Ftp Server=3.1.2
Cerberusftp Ftp Server=3.1.3
Cerberusftp Ftp Server=3.1.3.1
Cerberusftp Ftp Server=3.1.4
Cerberusftp Ftp Server=4.0.0
Cerberusftp Ftp Server=4.0.0.6
Cerberusftp Ftp Server=4.0.0.8
Cerberusftp Ftp Server=4.0.0.9
Cerberusftp Ftp Server=4.0.0.11
Cerberusftp Ftp Server=4.0.1
Cerberusftp Ftp Server=4.0.1.1
Cerberusftp Ftp Server=4.0.2
Cerberusftp Ftp Server=4.0.2.2
Cerberusftp Ftp Server=4.0.3.0
Cerberusftp Ftp Server=4.0.3.1
Cerberusftp Ftp Server=4.0.3.2
Cerberusftp Ftp Server=4.0.3.3
Cerberusftp Ftp Server=4.0.4.0
Cerberusftp Ftp Server=4.0.4.1
Cerberusftp Ftp Server=4.0.4.2
Cerberusftp Ftp Server=4.0.4.3
Cerberusftp Ftp Server=4.0.5
Cerberusftp Ftp Server=4.0.5.2
Cerberusftp Ftp Server=4.0.5.3
Cerberusftp Ftp Server=4.0.5.4
Cerberusftp Ftp Server=4.0.5.5
Cerberusftp Ftp Server=4.0.6
Cerberusftp Ftp Server=4.0.7
Cerberusftp Ftp Server=4.0.7.2
Cerberusftp Ftp Server=4.0.7.3
Cerberusftp Ftp Server=4.0.7.5
Cerberusftp Ftp Server=4.0.7.6
Cerberusftp Ftp Server=4.0.8.0
Cerberusftp Ftp Server=4.0.8.1
Cerberusftp Ftp Server=4.0.8.3
Cerberusftp Ftp Server=4.0.9.0
Cerberusftp Ftp Server=4.0.9.1
Cerberusftp Ftp Server=4.0.9.2
Cerberusftp Ftp Server=4.0.9.3
Cerberusftp Ftp Server=4.0.9.4
Cerberusftp Ftp Server=4.0.9.5
Cerberusftp Ftp Server=4.0.9.6
Cerberusftp Ftp Server=4.0.9.7
Cerberusftp Ftp Server=4.0.9.8
Cerberusftp Ftp Server=4.0.10.0
Cerberusftp Ftp Server=4.0.11.0
Cerberusftp Ftp Server=5.0.0.0
Cerberusftp Ftp Server=5.0.0.1
Cerberusftp Ftp Server=5.0.0.2
Cerberusftp Ftp Server=5.0.0.3
Cerberusftp Ftp Server=5.0.0.4
Cerberusftp Ftp Server=5.0.0.5
Cerberusftp Ftp Server=5.0.0.6
Cerberusftp Ftp Server=5.0.0.7
Cerberusftp Ftp Server=5.0.1.0
Cerberusftp Ftp Server=5.0.1.1
Cerberusftp Ftp Server=5.0.1.2
Cerberusftp Ftp Server=5.0.2.0
Cerberusftp Ftp Server=5.0.3.0
Event History
Oct 4, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5301?
CVE-2012-5301 is considered to have a high severity due to the potential for sensitive information disclosure through brute-force attacks.
2
How do I fix CVE-2012-5301?
To fix CVE-2012-5301, upgrade Cerberus FTP Server to version 5.0.4.0 or later to remove support for the insecure DES cipher.
3
Which versions of Cerberus FTP Server are affected by CVE-2012-5301?
Versions of Cerberus FTP Server prior to 5.0.4.0, including 1.0 through 5.0.3.1, are affected by CVE-2012-5301.
4
What type of vulnerability is CVE-2012-5301?
CVE-2012-5301 is a cryptographic vulnerability that affects the SSH protocol implementation in Cerberus FTP Server.
5
Can I mitigate CVE-2012-5301 without upgrading?
Mitigating CVE-2012-5301 without upgrading is challenging, but it's advised to restrict network access or implement additional monitoring.