CVE-2001-0103: Coffeecup Software Coffeecup Direct FTP

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.

Affected products

• Coffeecup Software Coffeecup Direct FTP: version 1.0 only
• Coffeecup Software Coffeecup Free FTP: version 1.0 only

Published 2001-02-12. Last modified 2026-06-16.