Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

NcFTP Local Information Disclosure Vulnerability

NcFTP has been reported prone to a local information disclosure vulnerability. The issue presents itself because the NcFTP client does not correctly obfuscate arguments that are passed to the client software. If NcFTP client has been launched with an ftp site URI as an argument, this argument will be visible in the 'ps -aux' process list.







 

Privacy Statement
Copyright 2009, SecurityFocus