CVE-2001-1042

Опубликовано: 02 июл. 2001

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.

Ссылки

http://www.securityfocus.com/archive/1/194443
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/2960
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/194443
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/2960
Broken Link
Exploit
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:transsoft:broker_ftp_server:5.9.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01581

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-ffwc-j4xg-37cv