PT-2001-1484 · Fastream · Fastream Ftp++ Server

Publicado 2001-04-04 · Atualizado 2017-12-19 · CVE-2001-0255

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FaSTream FTP++ Server version 2.0

Description The issue allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name in the requested pathname.

Recommendations For FaSTream FTP++ Server version 2.0, consider restricting access to the "ls" command or validating user input to prevent the inclusion of drive letter names in the requested pathname until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-0255

Produtos afetados

Fastream Ftp++ Server

Referências · 5

• 🔥 http://securityfocus.com/bid/2267 · Exploit
• 🔥 https://exploit-db.com/exploits/20584 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0255 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=98021181215325&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5977 · Nota