CVE-2001-0582
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/08/2001
Last modified:
19/12/2017
Description
Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.
Impact
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:ben_spink:crushftp_ftp_server:*:*:*:*:*:*:*:* | 2.1.6 (including) | |
cpe:2.3:a:ben_spink:crushftp_ftp_server:2.1.4:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page