PT-2001-1492 · Gene6 · Gene6 G6 Ftp Server+1

Publicado 2001-05-24 · Atualizado 2017-12-19 · CVE-2001-0263

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gene6 G6 FTP Server version 2.0 (aka BPFTP Server 2.10)

Description The issue allows attackers to read file attributes outside of the web root using the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.

Recommendations For Gene6 G6 FTP Server version 2.0 (aka BPFTP Server 2.10), consider enabling the "show relative paths" option to prevent attackers from reading file attributes outside of the web root via the SIZE and MDTM commands.

Exploit

Correção

Identificadores relacionados

CVE-2001-0263

Produtos afetados

Bpftp Server

Gene6 G6 Ftp Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/20726 · Exploit
• http://atstake.com/research/advisories/2001/a040301-1.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0263 · Nota de Segurança
• http://securityfocus.com/bid/2537 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6330 · Nota