CVE-2002-0978

CVE-2002-0978 describes a vulnerability in the Microsoft File Transfer Manager (FTM) ActiveX control, specifically versions prior to 4.0. This flaw allows remote attackers to perform unauthorized file uploads or downloads to arbitrary locations. The attack relies on a man-in-the-middle (MITM) scenario where an attacker modifies TGT and TGN parameters within a call to the "Persist" function. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is exploitable over the network with low attack complexity and requires no authentication, potentially leading to unauthorized information modification or data integrity compromise. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The CVE has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.