CVE-2002-1544 in Personal FTP Server

Summary

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Disclosure: 03/31/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20243
• CPE: ready
• CWE: CWE-22 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00331
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1544
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1544
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1544/