CVE-2002-0978

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-09-24 · updated 2026-06-16

Description

Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.

Affected products

Microsoft File Transfer Manager: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html
http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html

Get alerted when CVE-2002-0978 or the next vulnerability affects your stack