PT-2003-1278 · Cooolsoft · Cooolsoft Personal Ftp Server

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1545

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CooolSoft Personal FTP Server version 2.24

Description The issue allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command. This command includes the full path in the response, potentially revealing sensitive information about the server's file system.

Recommendations For CooolSoft Personal FTP Server version 2.24, consider restricting access to the PWD command as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1545

Produtos afetados

Cooolsoft Personal Ftp Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2002-1545 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html · Aviso do Fabricante