CVE-2001-1142

• BID:3029
• URL:http://www.securityfocus.com/bid/3029
• BUGTRAQ:20010712 ArGoSoft FTP Server 1.2.2.2 Weak password encryption
• URL:http://www.securityfocus.com/archive/1/196968
• XF:argosoft-ftp-weak-encryption(6848)
• URL:http://www.iss.net/security_center/static/6848.php (Obsolete source - check if archived by the Wayback Machine)

 Christey> In an e-mail response, the vendor stated that they were
   not a crypto expert and were using their own home-grown
   crypto.
 CHANGE> [Baker changed vote from REVIEWING to ACCEPT]
 Baker> I received an email from Artchil Gogava, of Argosoft, author
   of the program in question.  I think this is sufficient verification
   that the problem is probably as identified.  He states he is not an
   encryption expert, and that he invented his own encryption mechanism
   for this.  Need I say more?
   
  > >>EMAIL<<<
   \/\/\/\/\/
   Subject:  Re: Encryption in ArgoSoft FTP Server
   Date:     Thu, 9 May 2002 15:14:29 -0400
   From:     "Artchil Gogava" <archie@argosoft.com>
   To:       "David Baker" <bakerd@mitre.org>
   References:      1
   
   Hello David,
   
   lnk problem, described in the document, has been fixed ages ago, and it does
   not present in 1.2.2.2.  As of password encryption.  I am not an encryption
   expert.  I am using a method invented by myself, and I am sure that whatever
   I do, someone, who has spare time to play around with it, will find the
   method to decrypt it.
   
   Archie