CVE-2006-5982: SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers dire...

Security readout for executives and security teams

This is an old credential-storage issue in SeleniumServer FTP Server. The source says version 1.0, and possibly earlier, stored user passwords as plaintext in a Servers directory. Anyone who could read that file could recover passwords. The record warns that the provenance is unknown and details come from third-party sources. Exposure is likely limited to organizations still running SeleniumServer FTP Server 1.0 or possibly earlier. Risk depends on whether the Servers directory or backups are readable by users, administrators, services, or attackers with filesystem access. Prioritize verification over emergency response. If the product is present, treat it as a credential exposure risk and plan rapid containment, credential rotation, and replacement. If absent, no further action is needed beyond documenting the check. Mitigation focus: Inventory systems for SeleniumServer FTP Server 1.0 or earlier.; Check current vendor or maintainer guidance before applying product-specific fixes.; Restrict access to the Servers directory and related backups..

Prepared

Jun 29, 2026, 09:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.