CVE-2002-0264
UnknownEPSS 1.81%
Last modified
CVE-2002-0264 is a vulnerability of currently unknown severity. PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.. EPSS estimates a 1.81% chance of exploitation in the next 30 days.
Description
PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cooolsoft | Powerftp | 2.03 |
| Cooolsoft | Powerftp | 2.10 |
References
- http://www.securityfocus.com/bid/4074Vendor Advisory
- http://www.securityfocus.com/bid/4074Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-0264?
PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
How severe is CVE-2002-0264?
Severity scoring for CVE-2002-0264 is pending analysis. The EPSS model estimates a 1.81% probability of exploitation in the next 30 days.
How do I fix CVE-2002-0264?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-0258Merak Mail IceWarp Web Mail uses a static identifier as a us…
- CVE-2002-0259InstantServers MiniPortal 1.1.5 and earlier stores sensitive…
- CVE-2002-0260Buffer overflow in InstantServers MiniPortal 1.1.5 and earli…
- CVE-2002-0261Directory traversal vulnerability in InstantServers MiniPort…
- CVE-2002-0262Directory traversal vulnerability in netget for Sybex E-Trai…
- CVE-2002-0263Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows …
- CVE-2002-0265Sawmill for Solaris 6.2.14 and earlier creates the AdminPass…
- CVE-2002-0266Thunderstone Texis CGI script allows remote attackers to obt…
- CVE-2002-0267preferences.php in Simple Internet Publishing System (SIPS) …
- CVE-2002-0268Identix BioLogon 3 allows users with physical access to the …
- CVE-2002-0269Internet Explorer 5.x and 6 interprets an object as an HTML …
- CVE-2002-0270Opera, when configured with the "Determine action by MIME ty…
Are you affected by CVE-2002-0264?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST