PT-2001-2087 · Cooolsoft · Cooolsoft Powerftp Server

Published 2001-11-28 · Updated 2016-10-18 · CVE-2001-0934

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cooolsoft PowerFTP Server version 2.03

Description The issue allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.

Recommendations For Cooolsoft PowerFTP Server version 2.03, consider restricting access to the pwd command as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2001-0934

Affected Products

Cooolsoft Powerftp Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2001-0934 · Security Note
• http://marc.info/?l=bugtraq&m=100698397818175&w=2 · Note