admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2017/CVE-2017-15272.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

853 B
Raw Blame History

CVE-2017-15272

Description

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.

POC

Reference

Github

No PoCs found on GitHub currently.