CVE-2001-1386

Опубликовано: 01 июл. 2001

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.

Ссылки

http://www.securityfocus.com/archive/1/194442
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/2957
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/194442
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/2957
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:texasimperialsoftware:wftpd:3.00:r5:*:*:pro:*:*:*

EPSS

Процентиль: 72%

0.00729

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-h92h-m4pr-cxfx