Kozan has discovered a security issue in PeerFTP_5, which can be exploited by malicious, local users to gain knowledge of sensitive information.

Usernames and passwords are saved in plain text in the "PeerFTP.ini" file, which is readable by all users.

The security issue has been confirmed in version 5.2.6.1558. Other versions may also be affected.

Solution
Grant only trusted users access to affected systems.

Provided and/or discovered by
Kozan

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers