CVE-2006-5569 Hardcoded credentials in n/a

Medium 6.4 Published Updated

Remote attackers can read or write arbitrary files using default testing accounts in FtpXQ Server.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2006-5569?

CVE-2006-5569 is a medium-severity vulnerability in n/a, published on 27 Oct 2006. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Which versions are affected by CVE-2006-5569?

It affects 1 product.

Products include Datawizard Ftpxq.

How do I fix CVE-2006-5569?

No fix has been published for CVE-2006-5569 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-5569 being exploited?

There is no known exploitation of CVE-2006-5569 in the wild and no public exploit code.

Sources

Also known as GHSA-gh3m-6hm9-f3rx.

Is CVE-2006-5569 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free