CVE-2002-1544 in Personal FTP Server

Résumé

par MITRE

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Divulgation: 31/03/2003
• Modérer: accepté
• Entrée: VDB-20243
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 6.5 (VulDB)
• EPSS: 0.01581
• KEV: non
• Activités: très faible
• Secteur: Finance, Government, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1544
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1544
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1544/