PT-2001-1870 · Broker · Broker Ftp Server

Publicado 2001-08-29 · Atualizado 2017-12-19 · CVE-2001-0687

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Broker FTP server version 5.9.5

Description: The issue allows a remote attacker to retrieve privileged web server system information. This can be achieved by issuing a CD command (CD C:) followed by the LS command, or by specifying arbitrary paths in the UNC format (computernamesharename).

Recommendations: For Broker FTP server version 5.9.5, consider restricting access to the LS command and limiting the ability to specify arbitrary paths in the UNC format to minimize the risk of exploitation. As a temporary workaround, restrict the use of the CD command to prevent attackers from navigating to sensitive directories.

Exploit

Correção

Identificadores relacionados

CVE-2001-0687

Produtos afetados

Broker Ftp Server

Referências · 4

• 🔥 http://securityfocus.com/archive/1/190032 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6674 · Nota
• http://securityfocus.com/bid/2853 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0687 · Nota de Segurança