CVE-2005-4066: Christian Ghisler Total Commander

Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.

Affected products

• Christian Ghisler Total Commander: version 6.53 only

Published 2005-12-07. Last modified 2026-06-16.