CVE-2000-0646

Опубликовано: 21 июл. 2000

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1506
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1506
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*

cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*

cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00721

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2w42-wj39-8g7h

github

почти 4 года назад