FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/2267 | Exploit Vendor Advisory |
http://marc.info/?l=bugtraq&m=98021181215325&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5977 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-06-01 21:00
Updated : 2017-12-18 18:29
NVD link : CVE-2001-0255
Mitre link : CVE-2001-0255
JSON object : View
CWE
Products Affected
fastream
- fastream_ftp\+\+_server
- fastream_ftp_server