PT-2001-1512 · Sun · Sunftp

Published 2001-04-04 · Updated 2008-09-05 · CVE-2001-0283

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SunFTP build 9

Description A directory traversal issue allows remote attackers to read arbitrary files by using .. (dot dot) characters in various commands. The affected commands include GET, MKDIR, RMDIR, RENAME, and PUT.

Recommendations For SunFTP build 9, consider restricting access to these commands until a patch is available. As a temporary workaround, avoid using .. (dot dot) characters in the affected commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0283

Affected Products

Sunftp

References · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html · Exploit
• 🔥 https://exploit-db.com/exploits/20653 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0283 · Security Note