This script is Copyright (C) 2008 Tenable Network Security
Family
FTP
Plugin ID
34324
Bugtraq ID
CVE ID
Description:
Synopsis :
The remote FTP server allows credentials to be transmitted in clear
text.
Description :
The remote FTP does not encrypt its data and control connections. The
user name and password are transmitted in clear text and may be
intercepted by a network sniffer, or a man-in-the-middle attack.
Solution :
Switch to SFTP (part of the SSH suite) or FTPS (FTP over SSL/TLS). In
the latter case, configure the server such as data and control
connections must be encrypted.
Risk factor :
Low / CVSS Base Score : 2.6
(CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N)
