CVE-2001-0765

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html	Vendor Advisory
http://www.bisonftp.com/ServRev.htm	Vendor Advisory
http://www.securityfocus.com/bid/2963	Exploit Patch Vendor Advisory
http://www.osvdb.org/1888
https://exchange.xforce.ibmcloud.com/vulnerabilities/6782

Configurations

Configuration 1 (hide)

cpe:2.3:a:bisonware:bison_ftp_server:v4r1:*:*:*:*:*:*:*

Information

Published : 2001-10-17 21:00

Updated : 2017-10-09 18:29

NVD link : CVE-2001-0765

Mitre link : CVE-2001-0765

JSON object : View

CWE

NVD-CWE-Other

Products Affected

bisonware

bison_ftp_server

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html", "name": "20010702 BisonFTP Server V4R1 *.bdl upload Directory Traversal", "tags": ["Vendor Advisory"], "refsource": "BUGTRAQ"}, {"url": "http://www.bisonftp.com/ServRev.htm", "name": "http://www.bisonftp.com/ServRev.htm", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/2963", "name": "2963", "tags": ["Exploit", "Patch", "Vendor Advisory"], "refsource": "BID"}, {"url": "http://www.osvdb.org/1888", "name": "1888", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6782", "name": "bisonftp-bdl-directory-traversal(6782)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2001-0765", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2001-10-18T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:bisonware:bison_ftp_server:v4r1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-10-10T01:29Z"}

4.6 /10