cve.bz

CVE-2017-15272

5.3 mediumEPSS 0.6%

Medium (5.3) in psftp psftpd. EPSS 0.6% chance of exploitation in the next 30 days.

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.

Severity

CVSS 3.0

5.3 medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWEs
CWE-287, CWE-522
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON