FTP Error Causes Password to be Displayed in Clear Text

ID: Q228917


The information in this article applies to:
  • Microsoft Commercial Internet System version 2.5


SYMPTOMS

If an end user FTPs into MCIS 2.5 Personal Web Page system as anonymous and receives an error, the password is displayed in clear text in the error message.


CAUSE

This behavior is expected. An e-mail address for an anonymous password is an Internet standard.


MORE INFORMATION

Because the supplied password is for anonymous and is not an actual user's password, displaying the e-mail address back in the error message is not a security risk.

Additional query words: PWP FTP MCIS 2.5

Keywords :
Version : winnt:2.5
Platform : winnt
Issue type : kbprb


Last Reviewed: June 16, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.