CVE-2001-0698

Опубликовано: 20 сент. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.

Ссылки

http://www.netwinsite.com/surgeftp/manual/updates.htm
http://www.securityfocus.com/archive/1/191916
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2892
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6711
http://www.netwinsite.com/surgeftp/manual/updates.htm
http://www.securityfocus.com/archive/1/191916
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2892
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6711

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*

cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.0086

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3p45-phfh-52wq

github

больше 3 лет назад