CVE-2012-5301 | BDVDB-2026-52797 Detail

Description#

The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.cerberusftp.com/products/releasenotes.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/79503

Exploit#

No public exploit known

History#

Version 12012-10-04Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.