PT-2003-1278 · Cooolsoft · Cooolsoft Personal Ftp Server

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1545

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CooolSoft Personal FTP Server version 2.24

Description The issue allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command. This command includes the full path in the response, potentially revealing sensitive information about the server's file system.

Recommendations For CooolSoft Personal FTP Server version 2.24, consider restricting access to the PWD command as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-1545

Affected Products

Cooolsoft Personal Ftp Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2002-1545 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html · Vendor Advisory