NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2004-1940 | NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T01:07:49.141Z
Reserved: 2005-05-04T00:00:00
Link: CVE-2004-1948
No data.
Status : Deferred
Published: 2004-04-20T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2004-1948
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD