PT-2001-1492 · Gene6 · Gene6 G6 Ftp Server+1

Published 2001-05-24 · Updated 2017-12-19 · CVE-2001-0263

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gene6 G6 FTP Server version 2.0 (aka BPFTP Server 2.10)

Description The issue allows attackers to read file attributes outside of the web root using the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.

Recommendations For Gene6 G6 FTP Server version 2.0 (aka BPFTP Server 2.10), consider enabling the "show relative paths" option to prevent attackers from reading file attributes outside of the web root via the SIZE and MDTM commands.

Exploit

Fix

Related Identifiers

CVE-2001-0263

Affected Products

Bpftp Server

Gene6 G6 Ftp Server

References · 5

• 🔥 https://exploit-db.com/exploits/20726 · Exploit
• http://atstake.com/research/advisories/2001/a040301-1.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0263 · Security Note
• http://securityfocus.com/bid/2537 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6330 · Note