PT-2001-1484 · Fastream · Fastream Ftp++ Server

Published 2001-04-04 · Updated 2017-12-19 · CVE-2001-0255

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FaSTream FTP++ Server version 2.0

Description The issue allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name in the requested pathname.

Recommendations For FaSTream FTP++ Server version 2.0, consider restricting access to the "ls" command or validating user input to prevent the inclusion of drive letter names in the requested pathname until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2001-0255

Affected Products

Fastream Ftp++ Server

References · 5

• 🔥 http://securityfocus.com/bid/2267 · Exploit
• 🔥 https://exploit-db.com/exploits/20584 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0255 · Security Note
• http://marc.info/?l=bugtraq&m=98021181215325&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5977 · Note