Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.4

FlashFXP 1.4 passwords can be decoded

CVE-2003-1483 · published 22 years ago
Summary

Version 1.4 of FlashFXP stores user passwords with a weak encryption method, making them easy to decrypt. An attacker who obtains the password file could read the passwords and gain unauthorized access to your FTP accounts. Update to a newer version or change all passwords immediately.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
flashfxp flashfxp 1.4
cpe:2.3:a:flashfxp:flashfxp:1.4:*:*:*:*:*:*:*
Original advisory text
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
CWE-310Cryptographic Issues
Timeline
Published31 Dec 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-1483 · NVD
Track software like this
Free during beta