CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ben_spink:crushftp_ftp_server:*:*:*:*:*:*:*:*
cpe:2.3:a:ben_spink:crushftp_ftp_server:2.1.4:*:*:*:*:*:*:*

History

20 Nov 2024, 23:35

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html - Exploit, Patch, Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html - Exploit, Patch, Vendor Advisory
References () http://www.kb.cert.org/vuls/id/110803 - US Government Resource () http://www.kb.cert.org/vuls/id/110803 - US Government Resource
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/6495 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/6495 -

Information

Published : 2001-08-22 04:00

Updated : 2024-11-20 23:35


NVD link : CVE-2001-0582

Mitre link : CVE-2001-0582

CVE.ORG link : CVE-2001-0582


JSON object : View

Products Affected

ben_spink

  • crushftp_ftp_server