CVE-2023-33263

Name of the Vulnerable Software and Affected Versions WFTPD version 3.25

Description The software stores usernames and password hashes in an openly viewable wftpd.ini configuration file within the WFTPD directory. This issue is noted in a product from 2006.

Recommendations For WFTPD version 3.25, consider restricting access to the wftpd.ini configuration file to minimize the risk of exploitation. As a temporary workaround, limit read access to this file until a more secure storage method for usernames and password hashes is implemented.