CVE-2006-6949

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jan 23, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2006

CVE-2006-69505.0Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directCVE-2006-69516.8Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the CVE-2006-69527.2Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allowCVE-2006-69532.1The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users tCVE-2006-69544.3Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nesCVE-2006-69554.3Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marqueeCVE-2006-69564.3Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nestCVE-2006-69576.8PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows rCVE-2006-69587.5Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in CVE-2006-69594.6WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry CVE-2006-69606.8The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to byCVE-2006-69616.8WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detect
CVE-2006-6949: Medium severity, CVSS 4.6 | Vulnix