PT-2001-1512 · Sun · Sunftp

Publicado 2001-04-04 · Atualizado 2008-09-05 · CVE-2001-0283

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SunFTP build 9

Description A directory traversal issue allows remote attackers to read arbitrary files by using .. (dot dot) characters in various commands. The affected commands include GET, MKDIR, RMDIR, RENAME, and PUT.

Recommendations For SunFTP build 9, consider restricting access to these commands until a patch is available. As a temporary workaround, avoid using .. (dot dot) characters in the affected commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0283

Produtos afetados

Sunftp

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html · Exploit
• 🔥 https://exploit-db.com/exploits/20653 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0283 · Nota de Segurança