CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.Referenceshttp://archives.neohapsis.com/archives/bugtraq/2001-05/0252.htmlhttp://www.securityfocus.com/bid/2785http://www.iss.net/security_center/static/6608.php
