CNCVE编号：CNCVE-20010768 CVE编号：CAN-2001-0768 安全级别：中 漏洞中文描述： GuildFTPd 0.9.7 把用户名和口令明文存在 default.usr 文件中，这允许本地用户通过阅读此文件来获得与其他FTP用户相同的权限。 漏洞英文描述： GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file. 漏洞参考： Reference: BUGTRAQ:20010526 GuildFTPD v0.97 Directory Traversal / Weak password encryption Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html Reference: BID:2792 Reference: URL:http://www.securityfocus.com/bid/2792 Ref 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：设计错误