FTP PASSWORDS ARE STORED IN PLAINTEXT?!?!?!?! HOLY FUCK
On Fri, Apr 18, 2008 at 2:09 PM, carl hardwick <[EMAIL PROTECTED]> wrote: > A security issue in Filezilla 3.0.9.2 (and previous versions) allows > local users to retrieve all saved passwords because they're stored in > a plain text sitemanager.xml > > <?xml version="1.0" encoding="UTF-8" standalone="yes" ?> > <FileZilla3> > <Servers> > <Server> > <Host>ftpspace.domain.com</Host> > <Port>21</Port> > <Protocol>0</Protocol> > <Type>0</Type> > <Logontype>1</Logontype> > <User>[EMAIL PROTECTED]</User> > <Pass>I'mAPlainTextPassword</Pass> > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ >
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
