CVE-2002-0978: Microsoft File Transfer Manager

Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days.

Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.

Affected products

• Microsoft File Transfer Manager: any version

Published 2002-09-24. Last modified 2026-06-16.