CVE-2001-1110 Information disclosure in n/a
Remote attackers can sniff NETBIOS credentials by triggering a file information request on a network share in EFTP.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-1110?
CVE-2001-1110 is a medium-severity vulnerability in n/a, published on 15 Mar 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Which versions are affected by CVE-2001-1110?
It affects 1 product.
Products include Khamil Landross and Zack Jones Eftp.
How do I fix CVE-2001-1110?
No fix has been published for CVE-2001-1110 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-1110 being exploited?
There is no known exploitation of CVE-2001-1110 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cxw2-wmq4-fwjm.