4.6
CVE-2004-1948
- EPSS 0.08%
- Published 20.04.2004 04:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.
Data is provided by the National Vulnerability Database (NVD)
Ncftp Software ≫ Ncftp Version3.0.0
Ncftp Software ≫ Ncftp Version3.0.1
Ncftp Software ≫ Ncftp Version3.0.2
Ncftp Software ≫ Ncftp Version3.0.3
Ncftp Software ≫ Ncftp Version3.0.4
Ncftp Software ≫ Ncftp Version3.1.0
Ncftp Software ≫ Ncftp Version3.1.1
Ncftp Software ≫ Ncftp Version3.1.2
Ncftp Software ≫ Ncftp Version3.1.3
Ncftp Software ≫ Ncftp Version3.1.4
Ncftp Software ≫ Ncftp Version3.1.5
Ncftp Software ≫ Ncftp Version3.1.6
Ncftp Software ≫ Ncftp Version3.1.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.199 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|