CVE-2001-0765

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html	Vendor Advisory
http://www.bisonftp.com/ServRev.htm	Vendor Advisory
http://www.osvdb.org/1888
http://www.securityfocus.com/bid/2963	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6782
http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html	Vendor Advisory
http://www.bisonftp.com/ServRev.htm	Vendor Advisory
http://www.osvdb.org/1888
http://www.securityfocus.com/bid/2963	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6782

Configurations

Configuration 1 (hide)

cpe:2.3:a:bisonware:bison_ftp_server:v4r1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:36

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html - Vendor Advisory~~	() http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html - Vendor Advisory
References	~~() http://www.bisonftp.com/ServRev.htm - Vendor Advisory~~	() http://www.bisonftp.com/ServRev.htm - Vendor Advisory
References	~~() http://www.osvdb.org/1888 -~~	() http://www.osvdb.org/1888 -
References	~~() http://www.securityfocus.com/bid/2963 - Exploit, Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/2963 - Exploit, Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/6782 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/6782 -

Information

Published : 2001-10-18 04:00

Updated : 2024-11-20 23:36

NVD link : CVE-2001-0765

Mitre link : CVE-2001-0765

CVE.ORG link : CVE-2001-0765

JSON object : View

Products Affected

bisonware

bison_ftp_server

CWE

NVD-CWE-Other

{"id": "CVE-2001-0765", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-10-18T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.bisonftp.com/ServRev.htm", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/1888", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/2963", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6782", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.bisonftp.com/ServRev.htm", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/1888", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/2963", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6782", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories."}, {"lang": "es", "value": "BisonFTP V4R1 permite a usarios locales acceder a directorios fuera del suyo cargando ficheros .bld que pueden ser enlazados a otros directorios."}], "lastModified": "2024-11-20T23:36:06.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bisonware:bison_ftp_server:v4r1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "617FF40B-FCD2-4039-BD40-7A8C1BB050D6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}