Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> FTP >> DataWizard FTPXQ Default Accounts


Vulnerability Assessment Details

DataWizard FTPXQ Default Accounts

Vulnerability Assessment Summary
Tries to read a file via FTPXQ.

Detailed Explanation for this Vulnerability Assessment


Summary :

The remote FTP server has one or more default test accounts.

Description :

The version of DataWizard FTPXQ that is installed on the remote host
has one or more default accounts setup which can permit a possible hacker to
read and/or write arbitrary files on the system.

See also :

http://attrition.org/pipermail/vim/2006-November/001107.html

Solution :

Disable or change the password for any unnecessary user accounts.

Network Security Threat Level:

Medium / CVSS Base Score : 4.7
(AV:R/AC:L/Au:NR/C:P/I:P/A:N/B:N)

Networks Security ID: 20721

Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Justin Seitz

Cables, Connectors

HP 2620 (J9624A) Network Device. Port Switch PPoE+Switch 24 Port
$8.58
HP 2620 (J9624A) Network Device. Port Switch PPoE+Switch 24 Port pictureNetgear XSM4348S Switch - ProSafe M4300-24X24F - Brand New -
$3799.99
Netgear XSM4348S Switch - ProSafe M4300-24X24F - Brand New -  pictureCisco SG350-10MP 10-Port Gigabit PoE Managed Switch
$289.0
Cisco SG350-10MP 10-Port Gigabit PoE Managed Switch picture3Com OfficeConnect Gigabit Switch 8 Port Model 3C1670800C Network Switch
$8.99
3Com OfficeConnect Gigabit Switch 8 Port Model 3C1670800C Network Switch picture


Discussions

No Discussions have been posted on this vulnerability.