VulnerabilityModified
CVE-2002-0978
Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.
MEDIUM 5.0EPSS 8.35%
Does this matter?
Lower severity and a low EPSS score (8.35%). Track it; it rarely justifies an emergency change on its own.
Description
Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 8.35% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/file transfer manager
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.